CVE-2026-55132 is a double free vulnerability (CWE-415) in Microsoft Office Word component of Microsoft 365 Apps for Enterprise. The flaw enables an unauthorized attacker to execute code locally by exploiting improper memory management. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. The affected version explicitly stated is 16.0.1. Microsoft has released an official fix and manages remediation for this cloud service. No known exploits are reported in the wild at this time.

Successful exploitation of this vulnerability could allow an unauthorized attacker to execute arbitrary code locally, potentially leading to full compromise of the affected system’s confidentiality, integrity, and availability. The CVSS vector indicates low attack complexity and no privileges required, but user interaction is needed. The vulnerability is rated high severity.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should ensure their Microsoft 365 Apps for Enterprise environment is updated according to the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55132 to mitigate this vulnerability.