Microsoft update

KB5002824

Security Update

View on Microsoft →

Fixed in

Office Online Server 16.0.10417.20083

Fixes 3 records

TI-2026-16977 CVE-2026-20957 · GHSA-wv7r-h676-ghph

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00511 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5535.1000 +2 CWE-122

TI-2026-16975 CVE-2026-20955 · GHSA-jrvw-38hm-3w72

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00615 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.105.26011018 +1 CWE-822

TI-2026-16971 CVE-2026-20950 · GHSA-8vvr-98pg-3p3c

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00488 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5535.1000 +2 CWE-416