Code execution via undisclosed use-after-free

Use-after-free in Microsoft Office Word allows attackers to execute code after a target opens attacker-controlled content. Microsoft identifies Word as the affected component but has not published the object lifetime, parser path, or stale-reference operation that triggers the flaw. The user-interaction gate limits exploitation to content opened by a target, while successful code runs in that target's context.