Microsoft Office Word Use-After-Free Vulnerability Allowing Local Code Execution

Vulnerability

A use-after-free vulnerability has been identified in Microsoft Office Word. This issue allows an unauthorized attacker to execute code locally. The vulnerability arises from improper memory management, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2021 and 2024, the security update is also available via the Microsoft AutoUpdate tool.

Added: Apr 14, 2026, 7:07 PM
Updated: Apr 14, 2026, 7:07 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
2.7
remediation
0.0
relevance
5.9
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.