This vulnerability (CVE-2026-68811) is a type confusion issue (CWE-843) in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an attacker to access resources using an incompatible type, leading to local code execution. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, and user interaction required. The vulnerability impacts confidentiality, integrity, and availability. Microsoft has published an official fix and manages remediation for this cloud service.

Successful exploitation could allow an unauthorized attacker to execute arbitrary code locally, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability requires local access and user interaction to exploit.

An official fix is available from Microsoft. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Users and administrators should apply the official update as directed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68811 to mitigate this vulnerability.