Local code execution via use-after-free

Use-after-free in Microsoft Office Word before the August 2026 Office fixes allows attackers to execute code locally. Microsoft has disclosed only that Word reuses freed memory; no parser, file-format, or function-level details are public in the CNA record or vendor bulletin. The published vector is local with required user interaction and no prior privileges, so exploitation depends on user interaction in a local context and code runs with the current user's rights.