Microsoft update

KB5002849

Security Update

View on Microsoft →

Fixed in

Microsoft Excel 2016 (32-bit edition) 16.0.5543.1000
Microsoft Excel 2016 (64-bit edition) 16.0.5543.1000

Fixes 4 records

TI-2026-21103 CVE-2026-26109 · GHSA-xfqf-gmc6-gw8v

Microsoft Excel Remote Code Execution Vulnerability

LOW 39

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00466 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-125

TI-2026-21106 CVE-2026-26112 · GHSA-vg84-628g-v29p

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00489 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-822

TI-2026-21102 CVE-2026-26108 · GHSA-592m-3g3c-6r9c

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00553 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-122

TI-2026-21101 CVE-2026-26107 · GHSA-88fm-v3h6-578f

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00503 Published 2026-03-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +2 CWE-416