This vulnerability (CVE-2026-44819) involves a heap-based buffer overflow in Microsoft 365 Apps for Enterprise, specifically affecting version 16.0.1. The flaw enables an unauthorized attacker to execute code locally, potentially compromising system confidentiality, integrity, and availability. The CVSS 3.1 vector indicates low attack complexity, no privileges required, but user interaction is needed. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No known exploits are currently reported in the wild.

Successful exploitation can lead to local code execution by an unauthorized attacker, resulting in full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability is rated high severity with a CVSS score of 7.8. There are no reports of active exploitation in the wild at this time.

An official fix is available from Microsoft. Since Microsoft 365 Apps for Enterprise is a cloud service, Microsoft manages the remediation server-side. Users and administrators should ensure their environments are updated according to the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44819 to apply the fix.