This vulnerability (CVE-2026-32200) involves a use-after-free condition in Microsoft Office PowerPoint as part of Microsoft 365 Apps for Enterprise. Exploitation could allow an attacker to execute arbitrary code locally. The CVSS 3.1 score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, and user interaction needed. The vendor has released an official fix and manages remediation for this cloud service. No known active exploitation has been reported.

Successful exploitation could lead to local code execution by an unauthorized attacker, impacting confidentiality, integrity, and availability of the affected system. The vulnerability is rated high severity with a CVSS score of 7.8. There are no known exploits in the wild currently.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should ensure their Microsoft 365 Apps for Enterprise are updated according to the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32200. No additional action is required beyond applying the official fix.