This vulnerability in Microsoft Cost Management's Interactive Experiences component permits an unauthorized attacker to disclose sensitive information over a network. The CVSS 3.1 base score is 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact. Microsoft has released an official fix for this issue, as documented in their security update guide.

Successful exploitation results in unauthorized disclosure of sensitive information, potentially compromising confidentiality. There is no impact on integrity or availability. The vulnerability can be exploited remotely without authentication or user interaction.

An official fix is available from Microsoft. Users and administrators should apply the provided security update as soon as possible. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47633 for detailed patching instructions and confirmation of remediation status.