A heap-based buffer overflow in Microsoft Office Word enables an attacker not currently authenticated on the system to execute arbitrary code. The flaw is triggered by processing a crafted document, allowing a remote adversary to gain code execution privileges with the same user rights that the Office process runs under. Failure to address this vulnerability could allow attackers to compromise confidentiality, integrity, and availability of the affected system.

Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, and Microsoft Office LTSC for Mac 2024.

The vulnerability scores 8.8 on the CVSS scale, indicating a high severity level, and is not currently listed in the CISA Known Exploited Vulnerabilities catalog. Because no EPSS score is available, the probability of exploitation is uncertain, but the high CVSS and the nature of the flaw suggest that it is a likely target for malicious actors. The attack vector is inferred to be network or local, depending on access to the Office process, which can be triggered by opening a malicious document.