This vulnerability (CVE-2026-32189) is a use-after-free issue (CWE-416) in Microsoft Office Excel, part of Microsoft 365 Apps for Enterprise version 16.0.1. It enables an unauthorized attacker to execute code locally by exploiting improper memory handling. The vulnerability has been assigned a CVSS v3.1 score of 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No active exploitation has been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code locally on the affected system, potentially leading to full compromise of the impacted application and system. The vulnerability impacts confidentiality, integrity, and availability at a high level. However, there are no known exploits in the wild currently.

An official fix is available from Microsoft. Since this vulnerability affects a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should ensure that their Microsoft 365 Apps for Enterprise installations are updated to the latest version as per the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32189. No additional mitigation actions are indicated by the vendor.