A critical stack-based buffer overflow vulnerability in Microsoft Word could allow remote code execution, posing a severe risk to organizational data integrity and system availability.

The flaw is a stack-based buffer overflow (CWE-121) residing within Microsoft Office Word. It allows an unauthenticated attacker to trigger code execution over a network, provided the victim opens a maliciously crafted file.

The potential for remote code execution places this vulnerability in the high-severity category, supported by a CVSS score of 8.8. Successful exploitation could lead to full system compromise, unauthorized data exfiltration, and the installation of persistent malware, resulting in significant operational downtime and potential regulatory repercussions.

Immediate Action: Update all affected instances of Microsoft Office to the specified fixed versions or higher as detailed in the vendor security update.

Proactive Monitoring: Monitor network traffic for unusual outbound connections originating from endpoints where Office applications are installed, as these may indicate post-exploitation activity.

Compensating Controls: Ensure that Office macro security policies are strictly enforced and utilize endpoint detection and response tools to monitor for suspicious child processes spawned by Winword.exe.

Public Exploit Available: No (exploit_available: unknown)

Given the severity of potential remote code execution, organizations must prioritize patching all affected Office installations across their environment. IT administrators should verify that automatic updates are enabled and conduct a scan to ensure no legacy or out-of-date versions remain in production. Failure to address this vulnerability exposes endpoints to a significant risk of arbitrary code execution.