This vulnerability, identified as CVE-2024-43504 and classified under CWE-416 (Use After Free), affects Microsoft Excel in Microsoft 365 Apps for Enterprise. It enables remote code execution due to improper handling of memory, specifically use-after-free conditions. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability requires local access with low complexity and user interaction. Microsoft has released an official fix for the affected version 16.0.1. The product is a cloud service, and Microsoft manages remediation for this environment.

Successful exploitation could allow an attacker to execute arbitrary code remotely, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability requires user interaction and local access but does not require privileges. No active exploitation in the wild has been reported.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the provided patch to Microsoft 365 Apps for Enterprise version 16.0.1 promptly. Since this is a cloud service, Microsoft manages remediation on their side; users should verify they are running updated versions as per vendor guidance.