Microsoft Office Word Heap-Based Buffer Overflow Vulnerability Allowing Information Disclosure

A heap-based buffer overflow vulnerability has been identified in Microsoft Office Word. This vulnerability allows an unauthorized attacker to locally disclose information by exploiting the buffer overflow. The issue arises when Word processes a malicious file, potentially leading to the unauthorized reading of heap memory.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure, allowing an attacker to read portions of heap memory.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC 2021, 2024, and Microsoft 365 for Mac, the security updates will be released as soon as possible, with customers being notified when they are available.