Microsoft Office Word Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Word. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can download the security update for Microsoft Word 2016 (32-bit and 64-bit editions) from the Microsoft Update Catalog. For Microsoft Office LTSC 2021 and 2024 (both 32-bit and 64-bit editions), security updates are not yet available but will be released as soon as possible. Microsoft 365 Apps for Enterprise users can also download the security update through the Microsoft Update mechanism. SharePoint Server 2019 and SharePoint Enterprise Server 2016 users can download the security update from the Microsoft Update Catalog.