This vulnerability (CVE-2026-32198) is a use-after-free issue (CWE-416) in Microsoft Office Excel, part of Microsoft 365 Apps for Enterprise version 16.0.1. It allows local code execution by an unauthorized attacker, requiring user interaction. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, and user interaction needed. The vendor has published an official fix and manages remediation for the cloud-hosted service. No known active exploits have been reported.

Successful exploitation could allow an attacker to execute arbitrary code locally with high impact on confidentiality, integrity, and availability. This could lead to full compromise of the affected system. However, exploitation requires local access and user interaction, limiting remote exploitation risk. No known exploits are currently active in the wild.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should ensure their Microsoft 365 Apps for Enterprise installations are updated to the latest patched version as per Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32198. No additional mitigation actions are indicated by the vendor.