CVE-2026-47293 is a use-after-free vulnerability (CWE-416) affecting Microsoft 365 Apps for Enterprise, specifically in the Microsoft Office Click-To-Run component. It allows an authorized local attacker to elevate privileges by exploiting the use-after-free condition. The vulnerability is rated high severity with a CVSS 3.1 score of 7.0, indicating high impact on confidentiality, integrity, and availability. Microsoft has released an official fix and manages remediation for this cloud service. No known active exploitation has been reported.

Successful exploitation of this vulnerability could allow an authorized local attacker to elevate their privileges, potentially gaining higher-level access on the affected system. The CVSS score reflects high impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild currently.

An official fix is available from Microsoft. Because this is a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should follow the guidance in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47293 to ensure their environments are updated and protected.