Information disclosure via out-of-bounds read

Information disclosure in Microsoft Office allows attackers to disclose memory contents via crafted Office content opened locally. Microsoft has disclosed only that Office performs an out-of-bounds read while processing attacker-controlled content and has not identified the affected parser, file format, or code path. Exploitation requires local interaction with malicious Office content, likely by opening or previewing a file, and the published impact is limited to information disclosure rather than code execution or integrity loss.