CVE-2026-56193 is an out-of-bounds read vulnerability (CWE-125) in Microsoft 365 Apps for Enterprise version 16.0.1. It permits an unauthorized attacker to disclose information locally due to improper bounds checking. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high confidentiality impact. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No known exploits are currently reported.

Successful exploitation of this vulnerability can lead to local disclosure of sensitive information without requiring privileges, potentially compromising confidentiality. There is no impact on integrity, but availability impact is high according to the CVSS vector. No known active exploitation in the wild has been reported.

Microsoft has released an official fix for this vulnerability. Since this is a cloud service, Microsoft manages the remediation server-side. Users and administrators should ensure their Microsoft 365 Apps for Enterprise are updated to the fixed version as per the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56193.