A heap-based buffer overflow vulnerability in multiple Microsoft Office products enables remote code execution, posing a critical risk to organizational systems.

The flaw is a heap-based buffer overflow (CWE-122) triggered when the software processes malformed data. This vulnerability allows an unauthenticated attacker to achieve remote code execution, provided they can successfully interact with a user or system process via the network.

Successful exploitation of this vulnerability permits unauthorized code execution, which may lead to a complete compromise of the host system, data exfiltration, or the deployment of persistent malware. With a CVSS score of 8.8, the vulnerability is classified as High, reflecting the severe potential for impact on confidentiality, integrity, and availability of business information.

Immediate Action: Apply the vendor-provided security updates immediately by deploying the corresponding fixed versions listed in the enrichment data for your specific Office product.

Proactive Monitoring: Monitor endpoint processes for unusual memory consumption or unexpected spawning of child processes from Office applications, which may indicate attempted exploitation.

Compensating Controls: Utilize endpoint detection and response tools to block execution of suspicious macro-enabled files or network traffic originating from untrusted sources directed at Office components.

Public Exploit Available: Unknown.

Given the high CVSS severity and the potential for total system compromise via remote code execution, organizations should prioritize patching across all affected Microsoft Office installations. Please verify your current version against the fixed versions provided in the metadata and initiate an emergency update cycle to eliminate this exposure.