This vulnerability is an integer overflow or wraparound in Microsoft Office Excel that allows an attacker without authorization to execute arbitrary code. The flaw can compromise confidentiality, integrity, and availability on any affected system, enabling full control when exploited.

Affected systems include Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, and Microsoft Office Online Server. The specific product versions are those in the list, but exact patch levels are not specified in the data.

The CVSS score of 8.8 indicates a high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The flaw is exploitable over a network by an unauthorized attacker, suggesting that a remote code execution attack could be carried out on any machine running an affected Excel version if the attacker can trigger the overflow, for example via a crafted spreadsheet opened by the victim.