Microsoft Excel Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally. The vulnerability arises from improper memory management, which can be exploited by manipulating certain objects in memory.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users can download the security update for Microsoft Excel 2016 (both 32-bit and 64-bit editions) from the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2021 and 2024, the security update is also available through the Mac App Store. Instructions for updating Microsoft 365 Apps for Enterprise can be found on the Microsoft 365 Apps Security Updates page.