Local code execution via out-of-bounds read

Out-of-bounds read in Microsoft Office allows attackers to execute code locally via a crafted Office file opened on a target system. Microsoft has disclosed only that Office reads past an intended buffer boundary, and the published advisories do not identify the parser, file format, or code path that mishandles untrusted input. Exploitation requires local access and user interaction to open a malicious document, and successful exploitation runs code with the rights of the user who opened it.