Local code execution via use-after-free

Use-after-free in Microsoft Office products allows local users to execute code after required interaction by another user. Microsoft has not published the affected Office component, the object whose lifetime is mishandled, or the operation that reuses freed memory. Exploitation requires no privileges but does require user interaction and high-complexity preparation; successful exploitation executes attacker-controlled code in the affected application's context.