Microsoft Office Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office, which allows an unauthorized attacker to execute code locally. This vulnerability affects several different versions and editions of Microsoft Office, including Office LTSC 2021, Office 2019, Office 2016, and various editions of Microsoft 365 Apps for Enterprise. The vulnerability arises from improper memory management, leading to a use-after-free condition that can be exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog or via the Office Update mechanism. Specific update details can be found in the Microsoft Knowledge Base articles linked in the 'Security Updates' section.