This vulnerability is a heap-based buffer overflow in Microsoft 365 Apps for Enterprise (version 16.0.1). It enables an unauthorized attacker to execute arbitrary code locally on the affected system. The CVSS 3.1 base score is 8.4, reflecting high severity with high impact on confidentiality, integrity, and availability. The vulnerability requires local access with low attack complexity and no user interaction. Microsoft has published an official fix and manages remediation for this cloud-hosted service. The vendor advisory is available at the Microsoft Security Response Center.

Successful exploitation allows an attacker to execute arbitrary code locally, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS score of 8.4. There are no reports of active exploitation in the wild at this time.

An official fix is available from Microsoft. Users should apply the provided update to Microsoft 365 Apps for Enterprise version 16.0.1 or later as recommended in the Microsoft advisory. Since this is a cloud service, Microsoft manages remediation on their side; users should verify they have the latest updates applied according to the vendor guidance.