Microsoft update

KB5002831

Security Update

View on Microsoft →

Fixed in

Microsoft Excel 2016 (32-bit edition) 16.0.5535.1000
Microsoft Excel 2016 (64-bit edition) 16.0.5535.1000

Fixes 3 records

TI-2026-16977 CVE-2026-20957 · GHSA-wv7r-h676-ghph

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00511 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5535.1000 +2 CWE-122

TI-2026-16971 CVE-2026-20950 · GHSA-8vvr-98pg-3p3c

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00488 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5535.1000 +2 CWE-416

TI-2026-16967 CVE-2026-20946 · GHSA-q258-f5x3-ccfj

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00654 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5535.1000 +1 CWE-125