The vulnerability is a heap-based buffer overflow located in Microsoft Office Word. It can be triggered by an unauthorized attacker within the network to execute arbitrary code. The flaw permits remote code execution and can compromise the confidentiality, integrity, and availability of the affected system.

Affected products are Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, and Microsoft Office LTSC for Mac 2024. Version details are limited to the product lines listed; no specific build numbers are provided.

The CVSS score of 8.8 indicates a high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers can exploit this weakness remotely over a network, exploiting the lack of authentication or authorization checks before the buffer overflow is triggered. Given the high CVSS and the nature of the flaw, the potential impact is significant once the vulnerability is triggered.