A critical use after free vulnerability in Microsoft Office Excel enables unauthorized local code execution, posing a severe risk to system integrity.

This is a use after free flaw (CWE-416) that occurs when the application improperly handles memory during the processing of Excel files. An attacker can trigger this vulnerability without authentication, provided they can convince a user to open a malicious file.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the local user. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to full system compromise, unauthorized data exfiltration, or the installation of persistent malware, resulting in significant operational and security impacts.

Immediate Action: Apply the relevant security updates provided in the Microsoft Security Update Guide at the official Microsoft portal immediately.

Proactive Monitoring: Monitor endpoint logs for abnormal process spawning originating from Excel, such as unexpected shell commands or network connections.

Compensating Controls: Implement robust email filtering to block malicious attachments and ensure that users operate with the principle of least privilege to limit the potential impact of code execution.

Public Exploit Available: No (exploit_available: false)

The vulnerability presents a significant risk to organizational endpoints due to the potential for remote code execution. Security teams must prioritize the deployment of the vendor-supplied patches across all affected versions of Microsoft Office to eliminate the underlying memory corruption flaw and prevent potential exploitation.