CVE-2026-69614: CWE-121: Stack-based Buffer Overflow in Microsoft Microsoft 365 Apps for Enterprise

This vulnerability is a stack-based buffer overflow in Microsoft Office Access within Microsoft 365 Apps for Enterprise. It enables an attacker without privileges to execute arbitrary code remotely, potentially leading to full compromise of the affected system. The CVSS v3.1 score is 8.8, indicating high impact on confidentiality, integrity, and availability. Multiple version ranges are affected, all fixed in later builds. Microsoft has issued an official fix and provides vendor advisories with remediation details. No known exploits are reported in the wild at this time.

Successful exploitation allows remote code execution by an unauthorized attacker, which can lead to complete system compromise including full control over the affected Microsoft 365 Apps for Enterprise environment. The vulnerability impacts confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. The vendor manages remediation for this cloud-hosted service. Users should apply the latest updates as detailed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69614 to remediate this vulnerability.