Microsoft update

KB5002871

Security Update

View on Microsoft →

Fixed in

Office Online Server 16.0.10417.20128

Fixes 3 records

TI-2026-29137 CVE-2026-40362 · GHSA-qxwr-vc23-g88h

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00328 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-122

TI-2026-29134 CVE-2026-40359 · GHSA-whc2-9r39-wqcm

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00332 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-416

TI-2026-29135 CVE-2026-40360 · GHSA-m94j-ww5w-723q

Microsoft Excel Information Disclosure Vulnerability

LOW 34

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00408 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-125