Product:
Microsoft Office Word
Summary
A use after free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally. This can lead to significant impacts on confidentiality, integrity, and availability. The vulnerability requires user interaction to exploit, making it critical for users to be aware of potential risks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-62558 |
Exploitation
To exploit this vulnerability, an attacker must convince a user to open a specially crafted document in Microsoft Office Word. Once the document is opened, the attacker can execute arbitrary code on the user’s machine, potentially leading to unauthorized access and control over the system.
Affected Products
- Microsoft Office Word: A widely used word processing application that is vulnerable to local code execution due to a use after free issue.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office Word and apply any available security updates. Additionally, users should be cautious when opening documents from untrusted sources to reduce the risk of exploitation.