Microsoft Office Word includes code that can read beyond allocated memory bounds. This out‑of‑bounds read enables an unauthenticated attacker to gather sensitive data from the host system, such as configuration details or private user information. The result is a breach of confidentiality.

Affected products include Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, and Microsoft Office LTSC for Mac 2024. All listed product lines contain the vulnerable Word component and are impacted.

The vulnerability carries a CVSS score of 6.5, indicating moderate severity. No EPSS score is published, and it is not in the CISA KEV catalog, suggesting no documented exploitation in the wild. The likely attack vector is remote; an attacker can supply a crafted document over a network to a user running Office and trigger the memory read, exposing data.