A use‑after‑free bug in the Microsoft Office Click‑To‑Run engine allows an authorized local attacker to elevate privileges on the affected workstation. The flaw occurs when the runtime incorrectly handles a freed memory pointer, which can lead to execution of arbitrary code with higher privileges.

Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024 are affected. The vulnerability is confined to the Click‑To‑Run deployment channel in these Office products.

The CVSS score of 7.8 classifies the issue as high severity; the EPSS score is not available and the flaw is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation requires a local authorized user who can run Office, and that a crafted trigger could result in privilege escalation to the system level. The impact remains significant for any compromised workstation if an attacker gains local Office access.