A critical use after free vulnerability in Microsoft Office allows for local code execution, posing a severe risk to system integrity and confidentiality.

The software contains a use after free flaw (CWE-416) that can be triggered by an unauthorized attacker to execute code locally. This requires user interaction, as indicated by the CVSS vector.

The ability for an unauthorized attacker to execute arbitrary code on a workstation or server through a vulnerable Office application presents a high risk to organizational security. Successful exploitation could lead to total system compromise, unauthorized data access, and the potential for lateral movement within the network. Given the CVSS score of 7.8, this vulnerability is classified as High severity and requires prompt attention to prevent potential exploitation.

Immediate Action: Apply the latest security updates provided by Microsoft for all affected Office versions as specified in the official update guide.

Proactive Monitoring: Monitor system logs for suspicious process execution patterns or unexpected crashes occurring within Microsoft Office applications, which may indicate exploitation attempts.

Compensating Controls: Implement robust endpoint protection solutions and ensure that software restriction policies or application control mechanisms are in place to limit the impact of unauthorized code execution.

Public Exploit Available: No

Organizations should prioritize the deployment of Microsoft security updates to all systems running the affected Office products. Because this vulnerability allows for code execution, the risk of system compromise is significant. IT administrators must ensure that update cycles are accelerated to mitigate this threat before exploitation techniques become publicly available.