This vulnerability arises from an out-of-bounds read in Microsoft Word’s parsing engine (CWE‑125). When the program processes a specifically crafted document, it reads memory past the intended boundary, potentially exposing sensitive data such as credentials, personal files, or system credentials. The data leakage can be transmitted over a network to an attacker-controlled endpoint, allowing unauthorized disclosure of confidential information.

All Microsoft Office applications enumerated in the CNA listing are affected, including Microsoft 365 Apps for Enterprise, Microsoft Office 2019, 2021, 2024, the long‑term servicing channel builds of Office LTSC 2021, 2024, and the macOS equivalents of those releases, as well as Microsoft Word 2016. The vulnerability spans both Windows and macOS deployments and covers 32‑bit, 64‑bit, and long‑term servicing channel versions. No specific version is reported as fixed, so all installations of the listed products remain susceptible until an update is applied.

The reported CVSS score of 6.5 reflects a moderate confidentiality impact. Because the flaw is triggered through the processing of a malicious document, the attack vector is most likely user‑initiated, such as phishing or drive‑by downloads, rather than true remote code execution. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, indicating that it has not yet been widely exploited or observed in the wild. Nevertheless, the potential for confidential data exposure warrants immediate remediation.