A critical use after free vulnerability in Microsoft Office Visio enables local code execution, posing a significant risk to workstations and enterprise environments.

This is a use after free vulnerability (CWE-416) triggered when the application improperly handles memory during the processing of specially crafted files. The vulnerability requires user interaction and can be exploited by an unauthenticated attacker to achieve local code execution.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the logged in user. This could lead to a full compromise of the local workstation, unauthorized access to sensitive corporate documents, and potential lateral movement within the network. Given the CVSS score of 7.8, this flaw represents a high risk to organizational data integrity and system availability.

Immediate Action: Apply the latest security updates provided by Microsoft via the official Office Security Releases portal immediately to patch the affected versions.

Proactive Monitoring: Monitor endpoint logs for abnormal application crashes or unexpected child processes spawning from Visio.exe, which may indicate exploitation attempts.

Compensating Controls: Ensure that email filtering and endpoint protection solutions are configured to block suspicious document attachments and enforce macro security policies to limit attack vectors.

Public Exploit Available: Unknown

Organizations must prioritize the deployment of the vendor provided security updates across all affected Office installations. While the requirement for user interaction provides a slight barrier, the potential for total system compromise necessitates a prompt patching cycle to maintain a secure environment.