This vulnerability (CVE-2026-32197) involves a use-after-free condition in Microsoft Office Excel as part of Microsoft 365 Apps for Enterprise version 16.0.1. Exploitation could allow an attacker to execute arbitrary code locally. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction. Confidentiality, integrity, and availability impacts are all high. Microsoft has released an official fix and manages remediation for this cloud-hosted service.

Successful exploitation of this vulnerability can lead to local code execution by an unauthorized attacker, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires local access and user interaction. There are currently no known exploits in the wild.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages the remediation on their side. Users should ensure their Microsoft 365 Apps for Enterprise are updated according to the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32197. No additional user action is required beyond applying the official update.