Microsoft Office Word contains a stack-based buffer overflow that allows an attacker with network access to inject and execute arbitrary code. The flaw is triggered when the application processes specially crafted input, leading to remote code execution. Although the description does not detail the exact trigger, it indicates that code execution can be achieved over a network, implying a remotely exploitable vulnerability.

The vulnerability affects several Microsoft Office product lines, including Microsoft 365 Apps for Enterprise, Office 365 for Mac, Office LTSC 2021, Office LTSC 2024, Office LTSC for Mac 2021, and Office LTSC for Mac 2024. Version specifics are not enumerated in the available data.

The CVSS score of 8.8 categorizes this flaw as high severity, and the EPSS data is unavailable, but the lack of KEV listing does not diminish the risk of exploitation. The likely attack vector is through network delivery of malicious documents or links. Given the nature of the buffer overflow, a successful exploit could provide an attacker full control over the compromised system, undermining confidentiality, integrity, and availability.