This vulnerability (CVE-2026-81960) is a heap-based buffer overflow in Microsoft Office Excel component of Microsoft 365 Apps for Enterprise. It enables an unauthorized attacker to execute code locally by exploiting the overflow condition. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity, with impact on confidentiality, integrity, and availability. The vendor has released an official fix and manages remediation for this cloud service. The affected version is specifically 16.0.1. No known exploits in the wild have been reported at this time.

Successful exploitation allows local code execution by an unauthorized attacker, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability affects Microsoft 365 Apps for Enterprise Excel component version 16.0.1. No active exploitation has been reported.

An official fix is available from Microsoft. Users and administrators should apply the provided patch promptly. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81960 for detailed patching instructions and confirmation of remediation status.