Local code execution via use-after-free memory access

Use-after-free memory corruption in Microsoft Office allows attackers to execute code locally without prior authentication. Microsoft identifies the flaw only as a use-after-free in Office and has not disclosed the affected component, freed object, or triggering input. Exploitation requires local attack placement but no privileges or user interaction, and successful code execution can read, alter, or disrupt data in the current user's security context.