This vulnerability (CVE-2026-45461) involves a use-after-free condition in Microsoft 365 Apps for Enterprise, which could allow an unauthorized attacker to execute arbitrary code locally. The CVSS 3.1 base score is 8.4, indicating high impact on confidentiality, integrity, and availability. The vulnerability requires low attack complexity, no privileges, and no user interaction. Microsoft has published an official fix and manages remediation for this cloud service. No known exploits are reported in the wild at this time.

Successful exploitation could lead to local code execution by an unauthorized attacker, resulting in full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability affects Microsoft 365 Apps for Enterprise and poses a high risk if left unpatched.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should consult the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45461 for detailed guidance and ensure their environment is updated accordingly.