High · published October 14, 2025
⚡ An unauthorized attacker can execute code locally through a use-after-free vulnerability in Microsoft Office Visio — a recipe for chaos! 🔥 Think of it like a restaurant that didn't properly clean up after the last order; a leftover plate can still be used to serve food, leading to a surprising mix-up in the kitchen. In this case, the leftover data can be manipulated to execute harmful commands. An attacker could craft a malicious document that, when opened, executes arbitrary code on the victim's machine. This means they could potentially steal sensitive information, install malware, or take complete control of the system — absolutely devastating!
Think of it like a restaurant that didn't properly clean up after the last order; a leftover plate can still be used to serve food, leading to a surprising mix-up in the kitchen. In this case, the leftover data can be manipulated to execute harmful commands. This vulnerability occurs when Visio continues to use a memory reference that has already been freed, allowing attackers to exploit this oversight to run malicious code.
An attacker could craft a malicious document that, when opened, executes arbitrary code on the victim's machine. This means they could potentially steal sensitive information, install malware, or take complete control of the system — absolutely devastating! Immediately update Microsoft Office Visio to the latest version where the vulnerability is patched. Encourage users to avoid opening untrusted documents until they are updated to prevent exploitation. Regularly reviewing software patches is essential for security! You've got this! Stay vigilant, update, and you’ll have your defenses strengthened in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/365_apps | all versions | — |
| microsoft/365_apps | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |