This vulnerability (CVE-2026-70329) involves an integer overflow or wraparound in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. The flaw allows remote code execution by an unauthorized attacker over a network. It is classified under CWE-190. The vulnerability affects version 16.0.1 of the product. Microsoft has released an official fix and manages remediation for this cloud service. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, and user interaction required. Confidentiality, integrity, and availability impacts are all high.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the affected Microsoft 365 Apps for Enterprise environment. The vulnerability requires user interaction but no privileges or authentication, making it a significant risk if exploited.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should ensure that their Microsoft 365 Apps for Enterprise environment is updated to the fixed version as per Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70329. No additional mitigation actions are required beyond applying the official fix.