CVE-2026-69734: CWE-190: Integer Overflow or Wraparound in Microsoft Microsoft 365 Apps for Enterprise

This vulnerability involves an integer overflow or wraparound in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. Exploitation can lead to unauthorized information disclosure over a network. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, with high impact on confidentiality but no impact on integrity or availability. Microsoft has published an official fix and manages remediation for this cloud service. Affected versions include multiple version ranges prior to specific fixed builds.

Successful exploitation can result in unauthorized disclosure of information over a network. The vulnerability does not affect integrity or availability. No known active exploits have been reported.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should apply the official updates as provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734 to ensure protection.