This vulnerability (CVE-2026-81952) involves a heap-based buffer overflow in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. An attacker can exploit this flaw remotely to execute arbitrary code, potentially leading to full compromise of the affected system. The vulnerability has a high CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability. Microsoft has acknowledged the issue and provided an official fix. The affected version explicitly identified is 16.0.1. The product is a cloud service, and Microsoft manages remediation for this service.

Successful exploitation of this heap-based buffer overflow could allow an attacker to execute arbitrary code remotely without privileges, resulting in full compromise of the affected system's confidentiality, integrity, and availability. This poses a significant risk to users running the affected version of Microsoft 365 Apps for Enterprise.

An official fix is available from Microsoft. Users and administrators should apply the provided update promptly to mitigate this vulnerability. Since this is a cloud service, Microsoft manages remediation server-side; verify the vendor advisory for confirmation of patch deployment status.