Heap-Based Buffer Overflow in Microsoft Office Word

CVE-2025-32717

What is CVE-2025-32717?

A heap-based buffer overflow vulnerability in Microsoft Office Word allows unauthorized attackers to execute arbitrary code on affected systems. By crafting a malicious document file, an attacker could exploit this vulnerability, potentially leading to full system compromise. Users of the affected Microsoft Office Word versions are encouraged to apply available security updates to mitigate the risks associated with this vulnerability.

References