A high-severity out-of-bounds read vulnerability in multiple Microsoft Office products enables local code execution, posing a significant risk to endpoint integrity.

This vulnerability is caused by an out-of-bounds read and heap-based buffer overflow, allowing an unauthorized attacker to potentially achieve local code execution. The attack vector is local, meaning the attacker must already have a foothold or physical access to the target system to trigger the flaw.

The vulnerability carries a CVSS score of 8.4, which classifies it as a high-severity issue. Successful exploitation could lead to full system compromise, including unauthorized data access, the modification of sensitive documents, or the installation of malicious software, resulting in severe operational disruption and potential data exfiltration.

Immediate Action: Apply the latest security updates provided by Microsoft as detailed in the official security release guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49696.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unexpected crashes in Office applications that may indicate exploitation attempts.

Compensating Controls: Ensure that endpoint detection and response (EDR) solutions are active to identify and block suspicious local process behavior, and maintain strict access controls to limit local user privileges.

Public Exploit Available: Unknown

Given the high CVSS score and the critical nature of code execution vulnerabilities, organizations should prioritize patching affected Office installations across their environment. Administrators should verify that all endpoints are updated to the versions specified in the Microsoft security portal to eliminate the underlying memory corruption risk.