Out-of-Bounds Read in Microsoft Office Word

Executive Summary

This vulnerability is an out-of-bounds read issue in Microsoft Office Word. It allows an unauthorized attacker to access and disclose information stored locally on a system by reading beyond the intended memory boundaries of the application.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is an out-of-bounds read in Microsoft Office Word that allows local information disclosure. Detection primarily involves checking for vulnerable versions of Microsoft Office Word and applying security updates. Use the following commands to check installed versions and update status on Windows systems: For installed Office version, run 'powershell Get-AppxPackage -Name *Office*' or check 'Programs and Features' in Control Panel. For update status, run 'powershell Get-WindowsPackage -Online -PackageName '*' | Where-Object {$_.PackageName -like '*Office*'}' to identify pending updates.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to access sensitive data stored on your device, such as documents or personal information, potentially leading to privacy breaches or further attacks.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data disclosure, which may violate compliance requirements under GDPR or HIPAA if sensitive personal or health information is exposed.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest security updates from Microsoft for Office Word to patch the out-of-bounds read vulnerability.

Useful 0 Not Useful 0