This vulnerability involves an integer underflow (wrap or wraparound) in Microsoft Office components within Microsoft 365 Apps for Enterprise. Exploitation could allow an attacker without privileges or user interaction to execute code locally on the affected system. The vulnerability is tracked as CVE-2026-45463 and has been assigned a high CVSS score of 8.4. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No known exploits are currently reported in the wild.

Successful exploitation could lead to local code execution with high impact on confidentiality, integrity, and availability. The attacker requires local access but no privileges or user interaction. This could allow compromise of the affected system.

An official fix is available from Microsoft. Since this is a cloud service, Microsoft manages remediation server-side. Users and administrators should refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45463 for update status and ensure their Microsoft 365 Apps for Enterprise are updated accordingly.