An untrusted pointer dereference in Microsoft Office Word can allow an attacker to read data that should not be publicly exposed. The flaw arises when the application fails to properly initialize a pointer, resulting in the dereference of invalid memory that contains sensitive information. The vulnerability can be triggered by an unauthorized attacker and can lead to the disclosure of confidential data over a network.

The vulnerability affects Microsoft Office Word within the following Microsoft products: Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, and Microsoft Office LTSC for Mac 2024. Specific version ranges are not provided beyond the product names.

The CVSS score of 6.5 indicates a moderate severity and suggests that exploitation leads primarily to information disclosure without elevating privileges. The EPSS score is not available, so the current estimate of exploitation probability is unknown. The vulnerability is not listed in the CISA KEV catalog, implying no confirmed or widespread exploitation in the wild as of the last update. While the description indicates an unauthorized attacker can disclose information over a network, the likelihood of exploiting this flaw depends on the attacker’s ability to deliver a crafted payload that triggers the pointer dereference, which is inferred to be a remote attack vector.