CVE-2026-80082: CWE-125: Out-of-bounds Read in Microsoft Microsoft 365 Apps for Enterprise

This vulnerability (CVE-2026-80082) involves an out-of-bounds read (CWE-125) in Microsoft 365 Apps for Enterprise. It enables an unauthorized attacker to disclose sensitive information remotely over a network. The vulnerability affects several version ranges of Microsoft 365 Apps for Enterprise prior to fixed versions. Microsoft has published an official fix for this issue and manages remediation for this cloud-hosted service. The CVSS 3.1 base score is 6.5, indicating medium severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and high confidentiality impact.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of information over a network. There is no impact on integrity or availability. No known active exploitation has been reported.

An official fix is available from Microsoft. Users and administrators should apply the provided updates as detailed in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80082. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Check the vendor advisory for confirmation and update guidance.