Local code execution via heap buffer overflow

Heap-based buffer overflow in Microsoft Office allows local users to execute code on affected Office desktop releases via unspecified vectors. Microsoft has disclosed only the weakness class and impact; the public CVE, NVD, and GitHub advisory records do not identify the vulnerable Office component, the input that overruns the heap buffer, or the operation that fails bounds checking. Reachability is bounded by local execution conditions in the published CVSS assessments, and no authoritative public source reviewed documents remote delivery or observed exploitation.