This vulnerability is a use-after-free issue in Microsoft Office within Microsoft 365 Apps for Enterprise (version 16.0.1). It allows an authorized attacker with local access to elevate their privileges, potentially leading to complete compromise of confidentiality, integrity, and availability of the affected system. The CVSS v3.1 base score is 8.8, indicating high severity, with attack vector local, low attack complexity, and no user interaction required. Microsoft has published an official fix and manages remediation for this cloud-hosted service.

An authorized local attacker can exploit this use-after-free vulnerability to elevate privileges, resulting in high impact on confidentiality, integrity, and availability of the affected system. This could allow the attacker to execute arbitrary code with elevated permissions.

Microsoft has released an official fix for this vulnerability. Users should apply the provided update from Microsoft promptly. Since this is a cloud-hosted service, Microsoft manages remediation server-side; verify the vendor advisory for confirmation of patch deployment status.