Local code execution via use-after-free memory access

Use-after-free in affected Microsoft Office releases allows local users to execute code through an undisclosed memory-lifetime error. Microsoft has not published the affected Office component, the stale object's lifetime transition, or the operation that dereferences freed memory. Reachability requires local access, and successful exploitation runs attacker-controlled code in the context of the affected Office process.