This vulnerability (CVE-2026-32189) involves a use-after-free condition in Microsoft Office Excel as part of Microsoft 365 Apps for Enterprise. Exploitation could enable an unauthorized attacker to execute arbitrary code locally. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction. The impact includes high confidentiality, integrity, and availability consequences. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No known exploits are reported in the wild at this time.

Successful exploitation allows local code execution by an unauthorized attacker, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability affects Microsoft Office Excel within Microsoft 365 Apps for Enterprise, which is a cloud service. No known active exploitation has been reported.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should follow the guidance in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32189 to ensure their environment is updated and protected.