This vulnerability involves an out-of-bounds read in Microsoft Excel within Microsoft 365 Apps for Enterprise, which can lead to local code execution by an unauthorized attacker. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, and user interaction required. The vulnerability affects version 16.0.1. Microsoft has issued an official fix and manages remediation for this cloud service. The vendor advisory is available at the Microsoft Security Response Center.

Successful exploitation of this vulnerability could allow an unauthorized attacker to execute arbitrary code locally, potentially leading to full compromise of the affected system. The confidentiality, integrity, and availability impacts are all rated high according to the CVSS vector.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should ensure that their Microsoft 365 Apps for Enterprise installations are updated to the fixed version as per the vendor advisory. Refer to the Microsoft update guide for detailed patching instructions.