The vulnerability is a numeric truncation error in Microsoft Office Word that permits an unauthorized attacker to execute arbitrary code across a network. This flaw falls under CWE-122 and CWE-197 and results in a high-impact remote code execution scenario, potentially allowing an attacker to compromise compromised hosts, exfiltrate data, or pivot to other systems.

Affected products include Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024. No specific version ranges are listed in the CNA data; all installations of these Office suites are potentially impacted.

The CVSS base score of 8.8 indicates a high severity. The EPSS score is not available, but the vulnerability is not currently listed in the CISA KEV catalog. Based on the description, the likely attack vector is a network-based remote code execution that does not require authenticated access, meaning anyone able to supply a malicious Word document over the network can trigger the flaw.