Microsoft Office Word contains an untrusted pointer dereference that allows an unauthorized user to execute code locally when a specially crafted document is opened. The flaw, categorized as CWE-822, creates a vulnerability for arbitrary code injection at the application level, potentially allowing an attacker to run malicious binaries, steal information, or modify system state with the privileges of the logged‑in user.

The affected platforms include Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, and Microsoft Office LTSC for Mac 2024. Versions of these products prior to the issuance of the official patch are susceptible.

The CVSS score of 7.8 indicates a high risk of local compromise, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Because the attack requires local user access to a document, the attack vector is likely local (or remote if the file can be delivered via remote desktop, email, or shared network). Given its severity, attackers who can obtain or trick a user into opening a malicious file have a feasible path to arbitrary code execution.