This vulnerability (CVE-2026-32189) is classified as CWE-416 (Use After Free) and affects Microsoft Office Excel in Microsoft 365 Apps for Enterprise version 16.0.1. It allows an unauthorized attacker to execute code locally by exploiting a use-after-free condition. The vulnerability has been assigned a CVSS 3.1 base score of 7.8, indicating high severity. Microsoft has issued an official fix for this vulnerability and manages remediation for this cloud-hosted service. No known active exploits have been reported.

Successful exploitation of this vulnerability could allow an unauthorized attacker to execute arbitrary code locally with potentially high impact on confidentiality, integrity, and availability of the affected system. This could lead to full compromise of the affected Microsoft 365 Apps for Enterprise environment running the vulnerable Excel version.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should ensure their Microsoft 365 Apps for Enterprise installations are updated to the fixed version as per Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32189. No additional mitigation actions are required beyond applying the official fix.