This vulnerability, identified as CVE-2026-70313 and classified under CWE-20 (Improper Input Validation), affects Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to disclose information locally due to improper validation of input. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vulnerability affects version 16.0.1. Microsoft has issued an official fix and manages remediation for this cloud service. No known exploits have been reported.

Successful exploitation of this vulnerability could lead to local information disclosure, affecting confidentiality, integrity, and availability of the affected system. The attack requires local access and user interaction but no privileges. The impact is rated high due to the potential for significant information disclosure and system compromise.

An official fix is available from Microsoft for this vulnerability. Since this is a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should apply the official updates as directed in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70313 to mitigate this vulnerability.