Microsoft Excel Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally. The vulnerability arises from improper memory management, which can be exploited by manipulating certain objects in memory.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can download the security update for Microsoft Excel 2016 (both 32-bit and 64-bit editions) from the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2021 and 2024, the security update is also available through the Microsoft Update Catalog. Office Online Server users can download the security update from the Microsoft Update Catalog as well.