A high-severity heap out-of-bounds write in FreeRDP versions prior to 3.32.0 enables unauthenticated attackers to exploit the NTLM authentication path without needing valid credentials.
Heap overflows corrupt program control by poisoning adjacent metadata rather than overwriting the instruction pointer directly, creating a silent failure mode that standard stack protections ignore entirely.
A high-severity heap-based buffer overflow in Office Access lets remote attackers run code without authentication, affecting specific LTSC and M365 builds.