This vulnerability, identified as CVE-2026-68804, involves a numeric truncation error (CWE-197) in Microsoft Office Excel, part of Microsoft 365 Apps for Enterprise. The flaw enables an unauthorized attacker to execute code locally, potentially leading to full compromise of confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.8, reflecting high impact with local attack vector, low attack complexity, no privileges required, and user interaction needed. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No known exploits are reported in the wild at this time.

Successful exploitation allows an attacker to execute arbitrary code locally, resulting in complete compromise of the affected system's confidentiality, integrity, and availability. The vulnerability requires user interaction but no prior privileges, making it a significant local threat.

An official fix is available from Microsoft. Since Microsoft 365 Apps for Enterprise is a cloud service, Microsoft manages the remediation server-side. Users and administrators should ensure their installations are updated according to Microsoft's guidance available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68804.