Local privilege escalation via use-after-free

Use-after-free in Microsoft Office Click-To-Run allows local users with existing access to elevate privileges on affected Office installations. Microsoft identifies Click-To-Run as the affected component but has not disclosed the freed object's lifetime error or the operation that reuses it. Exploitation requires low-privileged local access and no user interaction, and successful abuse grants elevated control over the affected system.