A critical heap-based buffer overflow vulnerability in Microsoft Access could allow a remote attacker to achieve arbitrary code execution on affected systems.

This is a heap-based buffer overflow (CWE-122) triggered when the application improperly handles specific memory operations within Microsoft Office Access. The vulnerability allows an unauthorized attacker to execute code over a network, though it requires user interaction as indicated by the CVSS vector.

Successful exploitation grants an attacker the ability to execute arbitrary code within the context of the current user, potentially leading to full system compromise, data exfiltration, or the installation of persistent malicious software. With a CVSS score of 8.8, this vulnerability represents a high risk to organizational security, as it facilitates unauthorized access to sensitive business information and critical internal resources.

Immediate Action: Update all affected Microsoft Office installations to the specified fixed versions: 16.0.20326.20138 for 365 Apps, 16.0.5569.1002 for Access 2016, 16.0.5569.1000 for Office 2016, 16.0.10417.20207 for Office 2019, and 16.0.14334.20906 for Office LTSC 2021.

Proactive Monitoring: Review endpoint security logs for anomalous process behavior or unauthorized child processes spawned by MSACCESS.EXE.

Compensating Controls: Utilize endpoint detection and response (EDR) solutions to monitor for memory-related anomalies and implement restrictive network policies to limit outbound traffic from workstations running Office applications.

Public Exploit Available: No

Given the potential for total impact on the affected system, organizations should prioritize the deployment of the vendor-supplied patches across all endpoints. Administrators must ensure that the update cycle is completed promptly to close this critical memory corruption vector and prevent potential exploitation.