This vulnerability is a stack-based buffer overflow in Microsoft 365 Apps for Enterprise (version 16.0.1) that could allow an unauthorized attacker to execute arbitrary code locally. The vulnerability has a CVSS 3.1 score of 7.8, with attack vector local, low attack complexity, no privileges required, but user interaction is required. The impact includes high confidentiality, integrity, and availability impacts. Microsoft has released an official fix and manages remediation for this cloud-hosted service. The vulnerability is documented in the Microsoft Security Response Center advisory.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system with the privileges of the current user, potentially leading to full compromise of the local system. The vulnerability impacts confidentiality, integrity, and availability at a high level. However, exploitation requires local access and user interaction.

An official fix is available from Microsoft. Users and administrators should apply the update provided by Microsoft for Microsoft 365 Apps for Enterprise version 16.0.1 as soon as possible. Since this is a cloud-hosted service, Microsoft manages remediation server-side; verify the vendor advisory for confirmation of patch deployment status. No additional mitigation steps are indicated by the vendor advisory.