This vulnerability (CVE-2025-21362) is classified as CWE-416 (Use After Free) affecting Microsoft Excel in Microsoft 365 Apps for Enterprise. It allows an attacker to execute remote code due to improper handling of memory, potentially leading to full compromise of the affected application. The CVSS 3.1 base score is 8.4, indicating high impact on confidentiality, integrity, and availability. Microsoft has published an advisory confirming the vulnerability and that a patch is available. Since this is a cloud service, Microsoft manages the remediation process server-side.

Successful exploitation could allow an attacker to execute arbitrary code remotely within the context of the affected Microsoft 365 Apps for Enterprise environment, potentially leading to full compromise of the application and access to sensitive data. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Microsoft manages remediation for this cloud-hosted service and has released a patch. Users should ensure their Microsoft 365 Apps for Enterprise environment is updated according to Microsoft's guidance in the official advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21362. No additional user action is required beyond applying the update or ensuring the cloud service is current.