This vulnerability (CVE-2025-21402) in Microsoft Office LTSC for Mac 2021 (OneNote component) is classified under CWE-641, indicating improper restriction of names for files and other resources. It allows an attacker with local access and the ability to trick a user into interaction to execute code remotely. The CVSS 3.1 base score is 7.8 (high), with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability was published on January 14, 2025. The vendor advisory link is provided but does not include explicit patch or remediation details in the input data.

Successful exploitation could allow an attacker to execute arbitrary code remotely on the affected system, compromising confidentiality, integrity, and availability of the system. The attack requires local access and user interaction, which limits the attack surface. No known exploits in the wild have been reported as of the publication date.

Patch status is not yet confirmed — check the Microsoft vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21402 for current remediation guidance. Until an official fix is available, limit local access to trusted users and exercise caution with user interactions involving OneNote files. Monitor the vendor advisory for updates on patches or official mitigations.