The vulnerability is an out-of-bounds read bug in Microsoft Office Access that enables an attacker to read memory regions outside the intended bounds. This flaw results in the disclosure of internal data over a network, exposing sensitive information to unauthorized users. The flaw is a classic example of a buffer read error that can leak private data if triggered.

Affected products include Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024. No specific patch versions are listed in the data, so any installation of these products that has not received the latest security update is vulnerable.

The CVSS score of 6.5 indicates a moderate severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that large-scale exploitation is not yet documented. The likely attack vector is remote: an attacker could send a crafted Office file or trigger the read over a network connection, especially if Office is run with sufficient privileges. The flaw does not provide privilege escalation, but the information disclosure could compromise confidentiality of corporate or personal data contained in Office documents.