This vulnerability (CVE-2026-44824) is a heap-based buffer overflow in Microsoft 365 Apps for Enterprise that could allow an unauthorized attacker to execute code locally. It is classified under CWE-122. The CVSS 3.1 score is 7.8, indicating high severity with impact on confidentiality, integrity, and availability. The vulnerability affects version 16.0.1 of the product. Microsoft has released an official fix and manages remediation for this cloud-hosted service. No known exploits are reported in the wild at this time.

Successful exploitation could allow an unauthorized attacker to execute arbitrary code locally, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. However, no active exploitation has been reported.

An official fix is available from Microsoft. Since this is a cloud service, Microsoft manages the remediation server-side. Users should ensure their Microsoft 365 Apps for Enterprise are updated to the fixed version as per the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44824.