This vulnerability is a heap‑based buffer overflow in Microsoft Office Access. When an attacker delivers a specially crafted Access database file and a user opens or the system processes it, the overflow can allow the attacker to execute arbitrary code with the same privileges as the current user. The flaw can result in full compromise of the affected machine, including hostile code execution, privilege escalation, and data exfiltration.

Microsoft customers running Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, or Microsoft Office LTSC 2024 may be affected. The issue resides in the Access component of these products and is present across all supported architectures.

The CVSS score of 8.8 indicates high severity. The EPSS score of less than 1% shows that while exploitation probability is low, a publicly available exploit could still appear. Based on the description, the likely attack vector is delivering a malicious .accdb or .mdb file via a network share that is then opened by a user or a system process. It is not listed in CISA's KEV catalog, so no confirmed exploits are known, but the potential for remote code execution remains significant and warrants swift patching.