Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
Source: NVD ↗ · CISA KEV Catalog ↗