This vulnerability (CVE-2026-44823) involves a numeric truncation error (CWE-197) in Microsoft Office Excel as part of Microsoft 365 Apps for Enterprise. The flaw enables local code execution by an unauthorized attacker. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Microsoft has published an official fix and manages remediation for this cloud-hosted service. The affected version explicitly identified is 16.0.1.

An attacker who successfully exploits this numeric truncation error vulnerability can execute arbitrary code locally on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the impacted environment. The vulnerability requires local access and user interaction to exploit.

An official fix is available from Microsoft. Since this vulnerability affects a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should ensure their Microsoft 365 Apps for Enterprise installations are updated to the fixed version as per Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44823. No additional mitigation actions are indicated by the vendor advisory.