Microsoft update

KB5002846

Security Update

View on Microsoft →

Fixed in

Office Online Server 16.0.10417.20102, 16.0.10417.20113

Fixes 9 records

TI-2026-21103 CVE-2026-26109 · GHSA-xfqf-gmc6-gw8v

Microsoft Excel Remote Code Execution Vulnerability

LOW 39

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00466 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-125

TI-2026-21106 CVE-2026-26112 · GHSA-vg84-628g-v29p

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00489 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-822

TI-2026-21102 CVE-2026-26108 · GHSA-592m-3g3c-6r9c

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00553 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-122

TI-2026-21101 CVE-2026-26107 · GHSA-88fm-v3h6-578f

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00503 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-416

TI-2026-24731 CVE-2026-32199 · GHSA-rxgx-fx3q-7585

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416

TI-2026-24730 CVE-2026-32198 · GHSA-jcp6-v5w2-7r44

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00292 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416

TI-2026-24729 CVE-2026-32197 · GHSA-3rjw-x5rf-9pp3

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416

TI-2026-24721 CVE-2026-32189 · GHSA-9p74-5f5x-rgfp

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00372 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416

TI-2026-24720 CVE-2026-32188 · GHSA-w59x-747j-4pwm

Microsoft Excel Information Disclosure Vulnerability

LOW 31

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00411 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-125