This vulnerability (CVE-2026-55033) involves an integer overflow or wraparound in Microsoft Office Word as part of Microsoft 365 Apps for Enterprise. Exploitation could allow an unauthorized attacker to execute code locally on the affected system. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. The affected version is 16.0.1. Microsoft has released an official fix and manages remediation for this cloud-hosted service. No known exploits are reported in the wild at this time.

Successful exploitation of this vulnerability could lead to local code execution by an unauthorized attacker, compromising confidentiality, integrity, and availability of the affected system. The CVSS vector indicates low attack complexity and no privileges required, but user interaction is needed. The vulnerability affects Microsoft 365 Apps for Enterprise, specifically Microsoft Office Word version 16.0.1.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should ensure that their Microsoft 365 Apps for Enterprise environment is updated according to the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55033 to apply the official fix.