A critical heap-based buffer overflow vulnerability in multiple versions of Microsoft Office poses a severe risk of remote code execution.

This vulnerability is a heap-based buffer overflow (CWE-122) that can be triggered by an unauthenticated attacker over a network. Successful exploitation requires user interaction to execute the malicious code.

The vulnerability carries a CVSS score of 8.8, indicating a high risk of total system compromise. Successful exploitation allows an attacker to gain the same privileges as the logged-in user, potentially leading to unauthorized data access, the installation of malware, or complete system takeover. This poses a significant threat to organizational data integrity and operational continuity.

Immediate Action: Apply the vendor-provided security updates for the specific version of Microsoft Office installed in your environment as listed in the official Microsoft security update guide.

Proactive Monitoring: Monitor network traffic and endpoint telemetry for suspicious process creation or unusual behavior originating from Microsoft Office applications.

Compensating Controls: Ensure that User Account Control (UAC) is enabled and that endpoint security solutions are configured to detect and block malicious memory manipulation attempts.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS severity and the potential for remote code execution, organizations should prioritize patching affected Office installations. IT administrators should verify the version numbers against the provided list and deploy the relevant security updates immediately to mitigate the risk of exploitation.