CVE-2025-27747 Details

A use-after-free vulnerability has been identified in Microsoft Office Word. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited to manipulate the program's execution flow.

Security updates addressing this vulnerability are available for multiple versions of Microsoft Word and Office. Users should consult the Microsoft Update Catalog or the Microsoft Office Update Guide for specific update instructions. For SharePoint Enterprise Server 2016, the security update (KB5002692) is also available.