Microsoft Office Word Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Word. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited by manipulating certain objects in memory.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the local machine.

Remediation

Users can download the security update for Microsoft Office LTSC 2024 (both 32-bit and 64-bit editions) and for Microsoft 365 Apps for Enterprise (also available in 32-bit and 64-bit versions) to address this vulnerability.