CVE-2026-45466 is a heap-based buffer overflow vulnerability in Microsoft Office Word component of Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker with local access and user interaction to cause information disclosure. The vulnerability has a CVSS 3.1 base score of 3.3, indicating low severity. Microsoft has released an official fix for this issue and manages remediation for the cloud service. No known exploits are reported in the wild.

The vulnerability can lead to local information disclosure without impacting integrity or availability. Exploitation requires user interaction and local access, limiting the attack scope. There are no reports of active exploitation.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages the remediation. Users and administrators should apply the official update as directed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45466 to mitigate this vulnerability.