CVE-2026-69722: CWE-121: Stack-based Buffer Overflow in Microsoft Microsoft 365 Apps for Enterprise

This vulnerability, identified as CWE-121 (stack-based buffer overflow), exists in Microsoft Office Word within Microsoft 365 Apps for Enterprise. It enables remote code execution by an attacker without privileges, requiring only user interaction. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Multiple affected version ranges are documented, and Microsoft has released an official fix. The vendor advisory is available at the Microsoft Security Response Center.

Successful exploitation allows an attacker to execute arbitrary code remotely, potentially leading to full compromise of the affected system. The vulnerability impacts confidentiality, integrity, and availability of the system. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Microsoft 365 Apps for Enterprise as detailed in the vendor advisory. Since this is a cloud service, Microsoft manages remediation for the cloud-hosted components. Check the Microsoft Security Response Center advisory for the latest update status and patch instructions.