Use-After-Free Vulnerability in Microsoft Office Products
CVE-2014-6357

Currently unrated

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
11 December 2014

What is CVE-2014-6357?

This vulnerability is a use-after-free flaw found in various versions of Microsoft Office products. When exploited, it allows remote attackers to execute arbitrary code by crafting a malicious Office document. This can occur in several Office products, including Office 2010, Office 2013, Office for Mac, and others. Users opening such documents may be subjected to the attack without their knowledge, potentially leading to unauthorized access or control over their systems.

References

EPSS Score

55% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.