A critical use after free vulnerability in Microsoft Office Visio exposes users to potential local code execution if they open a specially crafted file.

This is a use after free flaw (CWE-416) triggered when the application improperly handles memory during the processing of Visio files. An unauthorized attacker can leverage this to execute code locally, provided the user interacts with a malicious file.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the logged in user, potentially leading to a full system compromise. Given the CVSS score of 7.8, the impact is considered high because it facilitates unauthorized access and potential data exfiltration within the corporate environment.

Immediate Action: Apply the latest security updates provided by Microsoft via the official update guide at https://aka.ms/OfficeSecurityReleases immediately.

Proactive Monitoring: Monitor endpoint logs for unusual child processes spawned by the Visio application, such as command shells or unauthorized network connections.

Compensating Controls: Implement file integrity monitoring and ensure that macro security settings are configured to block untrusted content from external sources.

Public Exploit Available: No (exploit_available: false)

The severity of this vulnerability necessitates prompt remediation across all workstations utilizing Microsoft Office Visio. Administrators should prioritize the deployment of the vendor provided security updates to mitigate the risk of local code execution and ensure the long term integrity of the endpoint environment.