A critical stack-based buffer overflow vulnerability in Microsoft Office products permits unauthenticated remote code execution, posing a significant risk to organizational integrity.

This vulnerability is a stack-based buffer overflow (CWE-121) occurring within Microsoft Office Word. An unauthenticated attacker can exploit this flaw to execute arbitrary code on the target system.

Successful exploitation allows an attacker to gain full control over the affected workstation, potentially leading to unauthorized data access, lateral movement within the network, and complete system compromise. With a CVSS score of 8.8, this vulnerability is classified as High severity, reflecting the high potential for total loss of confidentiality, integrity, and availability of the host machine.

Immediate Action: Apply the vendor-supplied security updates immediately by referencing the Microsoft Security Update Guide for the specific product version.

Proactive Monitoring: Monitor endpoint logs for suspicious process execution patterns originating from Microsoft Word, such as unexpected child processes spawning from winword.exe.

Compensating Controls: Ensure that Office macro security settings are configured to high, and utilize endpoint protection platforms to detect and block malicious document execution attempts.

Public Exploit Available: No (exploit_available: false)

Given the potential for remote code execution, organizations should prioritize the deployment of the provided security patches across all affected endpoints. Failure to remediate could allow attackers to bypass standard security controls, making immediate patch management essential to maintaining a secure environment.