Microsoft Excel Use-After-Free Vulnerability Allowing Local Code Execution

Vulnerability

A use-after-free vulnerability has been identified in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited by manipulating the application's handling of memory resources.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the local machine.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, security update details are available on the Microsoft 365 Apps Security Updates page.

Added: Oct 14, 2025, 6:16 PM
Updated: Oct 14, 2025, 8:42 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.7
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.