This vulnerability (CVE-2026-47290) involves a use-after-free condition in Microsoft 365 Apps for Enterprise, which could allow an unauthorized attacker to execute code locally on the affected system. The CVSS 3.1 score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability affects version 16.0.1 of the product. Microsoft has issued an official fix and manages remediation for this cloud service. No known exploits are reported in the wild at this time.

Successful exploitation of this use-after-free vulnerability could lead to local code execution by an unauthorized attacker, potentially resulting in full compromise of confidentiality, integrity, and availability of the affected system. The CVSS vector indicates low attack complexity, no privileges required, and user interaction is required.

An official fix is available from Microsoft. Since this is a cloud service, Microsoft manages remediation server-side. Users and administrators should consult the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47290 to ensure their environments are updated and patched accordingly.