This vulnerability, identified as CVE-2026-45474, is a use-after-free flaw (CWE-416) in Microsoft 365 Apps for Enterprise. It enables an unauthorized attacker to execute code locally on affected systems. The CVSS 3.1 base score is 8.4, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix and manages remediation for this cloud service. No active exploitation has been reported.

Successful exploitation allows an attacker to execute arbitrary code locally, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS score of 8.4. No known exploits are currently active in the wild.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should follow guidance in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45474 to ensure their environments are updated and protected.