An out‑of‑bounds read in Microsoft Office allows a user to execute arbitrary code on the host during normal document processing. The flaw arises from improper bounds checking (CWE‑125) and an integer overflow (CWE‑191), which together enable the attacker to read memory beyond a buffer and trigger code execution when a specially crafted file is opened. Because the vulnerability is triggered by regular Office activity, any user who opens the malicious document can gain execution privileges on the affected machine.

All Microsoft Office product lines listed by the CNA are impacted, including Microsoft 365 Apps for Enterprise, Office 2016, Office 2019, Office 2021 LTSC, Office 2024 LTSC, Office 365 for Mac, Office 2021 Mac, and Office 2024 Mac. No specific patch or version numbers are provided in the data, so any installation of these products prior to the latest security update is considered vulnerable.

The CVSS score of 7.8 signals a high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating limited known exploitation. The flaw requires the Office application to be running and a malicious document to be supplied to the user, so it is likely exploitable by an attacker who can deliver a crafted file to a local user. While the impact is confined to the local user context, a compromised workstation could allow full system compromise.