CVE-2026-69767: CWE-416: Use After Free in Microsoft Microsoft 365 Apps for Enterprise

This vulnerability, tracked as CVE-2026-69767 and classified under CWE-416 (Use After Free), exists in Microsoft Office PowerPoint as part of Microsoft 365 Apps for Enterprise. It enables remote code execution by an unauthorized attacker due to improper handling of memory after it has been freed. The CVSS 3.1 base score is 8.8, indicating high severity, with network attack vector, low attack complexity, no privileges required, and user interaction required. The vulnerability affects multiple version ranges of Microsoft 365 Apps for Enterprise prior to fixed versions. Microsoft has issued an official fix for this vulnerability and manages remediation for this cloud-hosted service. No known exploits are reported in the wild.

Successful exploitation could allow an attacker to execute arbitrary code remotely on the affected system, potentially leading to full compromise including confidentiality, integrity, and availability impacts. The vulnerability requires user interaction but no privileges or authentication, increasing its risk profile.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Microsoft 365 Apps for Enterprise as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69767. Since this is a cloud-hosted service, Microsoft manages remediation server-side. There are no known exploits in the wild, but timely patching is recommended.