This vulnerability (CVE-2026-42831) involves a heap-based buffer overflow in Microsoft Office for Android, specifically affecting version 16.0.1. The flaw enables an unauthorized attacker to execute arbitrary code locally, potentially compromising confidentiality, integrity, and availability of the affected system. The vulnerability has been assigned a CVSS v3.1 score of 7.8, indicating high severity. Microsoft has published an official fix to remediate this issue as detailed in their security update guide.

Successful exploitation of this heap-based buffer overflow could allow an attacker to execute arbitrary code locally on the affected device, leading to full compromise of the confidentiality, integrity, and availability of the Microsoft Office application and potentially the device itself.

An official fix is available from Microsoft. Users and administrators should apply the security update for Microsoft Office for Android version 16.0.1 as provided in the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42831 to remediate this vulnerability.