Code execution via heap-based buffer overflow

Heap-based buffer overflow in Microsoft Office Access in Microsoft 365 Apps and Office editions allows attackers to execute code via a crafted file. Microsoft has disclosed only that Access corrupts heap memory while processing untrusted file content; the affected parser routine and the malformed field that overruns the destination buffer have not been published. Exploitation requires local delivery and user interaction to open the malicious file, and successful exploitation runs in the security context of the current user.