This vulnerability (CVE-2026-44822) involves an out-of-bounds read in Microsoft Office Excel, part of Microsoft 365 Apps for Enterprise. It enables an attacker with no privileges and no user interaction to remotely disclose information over a network. The vulnerability is classified under CWE-125 (Out-of-bounds Read). Microsoft has published an official fix and manages remediation for this cloud service. The affected version explicitly stated is 16.0.1. No known active exploitation has been reported.

Successful exploitation can lead to unauthorized disclosure of information over the network, impacting confidentiality. The vulnerability does not affect integrity or availability. The attack vector is network-based with low attack complexity and no privileges or user interaction required, making it a significant risk if unpatched.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should consult the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44822 to ensure their environment is updated and protected.