This vulnerability (CVE-2026-42831) is a heap-based buffer overflow in Microsoft Office for Android, specifically affecting version 16.0.1. It enables an unauthorized attacker to execute arbitrary code locally. The CVSS v3.1 score is 7.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this issue, as documented in their security update guide.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the local device, potentially leading to full compromise of the affected Microsoft Office for Android application. This impacts confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update for Microsoft Office for Android version 16.0.1 as provided in the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42831. Applying this patch will remediate the vulnerability.