CVE-2026-32197 is a use-after-free vulnerability (CWE-416) in Microsoft Office Excel component of Microsoft 365 Apps for Enterprise. This vulnerability allows an unauthorized attacker to execute code locally by exploiting the use-after-free condition. The CVSS v3.1 base score is 7.8, indicating high severity with impact on confidentiality, integrity, and availability. The vulnerability affects version 16.0.1. Microsoft has released an official fix and manages remediation for this cloud service. No known exploits are reported in the wild at this time.

Successful exploitation of this vulnerability could allow an unauthorized attacker to execute arbitrary code locally, potentially leading to full compromise of the affected application and system. The CVSS vector indicates high impact on confidentiality, integrity, and availability. However, exploitation requires local access and user interaction.

An official fix is available from Microsoft. Users of Microsoft 365 Apps for Enterprise should apply the provided update to address this vulnerability. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32197 for detailed patching instructions and confirmation of remediation status.