This vulnerability (CVE-2026-68803) is a type confusion issue (CWE-843) in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code locally by accessing a resource using an incompatible type. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, and user interaction required. The vulnerability affects version 16.0.1 of the product. Microsoft has released an official fix and manages remediation for this cloud service.

Successful exploitation of this vulnerability could allow an unauthorized attacker to execute arbitrary code locally on the affected system, potentially leading to full compromise of the affected application and associated data. The CVSS score indicates high impact on confidentiality, integrity, and availability.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages the remediation server-side. Users and administrators should ensure their Microsoft 365 Apps for Enterprise are updated to the fixed version as per Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68803.