Microsoft Office Word Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Microsoft Office Word. This issue allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction, as an attacker must send a malicious file that the user needs to open.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, the security update will be released as soon as possible, and customers will be notified via a revision to this CVE information.