Microsoft update

KB5002884

Security Update

View on Microsoft →

Fixed in

Office Online Server 16.0.10417.20175

Fixes 58 records

TI-2026-46895 CVE-2026-65807 · GHSA-6cm4-q5j4-r599

Microsoft Excel Remote Code Execution Vulnerability

MEDIUM 42

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-843

TI-2026-48393 CVE-2026-68817 · GHSA-6mcr-3v92-fh29

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-121

TI-2026-48392 CVE-2026-68816 · GHSA-4x7r-w35q-cr5x

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-121

TI-2026-48391 CVE-2026-68815 · GHSA-9223-7x8q-h7rv

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-122

TI-2026-48390 CVE-2026-68814 · GHSA-2v44-37v7-xj8c

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-125

TI-2026-48388 CVE-2026-68812 · GHSA-3w9w-7h4m-fvmr

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-122

TI-2026-48387 CVE-2026-68811 · GHSA-656m-qv56-43cq

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-843

TI-2026-48386 CVE-2026-68810 · GHSA-q563-hwx6-h22r

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-822

TI-2026-48383 CVE-2026-68807 · GHSA-mqxf-72vh-q4mh

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in 16.112.26081010 CWE-122

TI-2026-48382 CVE-2026-68806 · GHSA-5wr6-m8x4-v27m

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-787

TI-2026-48381 CVE-2026-68805 · GHSA-hv7j-5cx9-87r4

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-122

TI-2026-48380 CVE-2026-68804 · GHSA-pr9p-842j-v7hq

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-122

TI-2026-48379 CVE-2026-68803 · GHSA-3gc6-9vg4-vj89

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-843

TI-2026-48377 CVE-2026-68801 · GHSA-cff6-wjc9-gpcj

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-122

TI-2026-48376 CVE-2026-68800 · GHSA-fg32-39rc-x8mq

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in 16.112.26081010 CWE-122

TI-2026-48372 CVE-2026-68796 · GHSA-3r5f-2f5q-hg58

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-122

TI-2026-48371 CVE-2026-68795 · GHSA-w2v7-4mj3-h376

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-121

TI-2026-48370 CVE-2026-68794 · GHSA-qjh2-cff4-qrcf

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-122

TI-2026-48369 CVE-2026-68793 · GHSA-45m5-pvjg-v496

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-125

TI-2026-42192 CVE-2026-58618 · GHSA-cjqx-7vg8-mm6c

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-40355 CVE-2026-55949 · GHSA-g26f-g9f2-wqvr

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-908

TI-2026-40354 CVE-2026-55948 · GHSA-vm8w-v83h-8752

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-416

TI-2026-40353 CVE-2026-55947 · GHSA-px56-54pw-c679

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-40349 CVE-2026-55899 · GHSA-hr7p-25v4-pxc7

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-121

TI-2026-39839 CVE-2026-55141 · GHSA-6236-c2c5-2j6c

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-121

TI-2026-39835 CVE-2026-55137 · GHSA-vh57-7369-46vq

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39834 CVE-2026-55136 · GHSA-q8g8-h36v-wcv9

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-822

TI-2026-39829 CVE-2026-55131 · GHSA-2xhx-8hwj-hj2c

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39765 CVE-2026-55058 · GHSA-fw32-5jmc-676r

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-39760 CVE-2026-55053 · GHSA-q5m6-w3x7-pm25

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39755 CVE-2026-55048 · GHSA-wx7g-r7w5-gv3h

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39751 CVE-2026-55044 · GHSA-4mg3-vgrx-mf99

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-39748 CVE-2026-55041 · GHSA-7w65-7pmj-m7w2

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39746 CVE-2026-55039 · GHSA-h63h-p87q-mppp

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39744 CVE-2026-55037 · GHSA-9vr8-vg7r-fgf5

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39743 CVE-2026-55036 · GHSA-mp23-5v8j-rg6j

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-126

TI-2026-39738 CVE-2026-55031 · GHSA-88h5-prqr-v67r

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-39736 CVE-2026-55029 · GHSA-f28p-7rm3-827g

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39732 CVE-2026-55025 · GHSA-wgfr-mf59-497p

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-843

TI-2026-39731 CVE-2026-55024 · GHSA-gmj3-jv2h-3mhj

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-843

TI-2026-39055 CVE-2026-54131 · GHSA-wj9r-qhp4-vhvp

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +1 CWE-416

TI-2026-37359 CVE-2026-50675 · GHSA-p2vq-f9rc-v3c2

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-35153 CVE-2026-47642 · GHSA-gm89-fgch-cv7q

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +1 CWE-416

TI-2026-40348 CVE-2026-55898 · GHSA-vqrv-f82h-5296

Microsoft Excel Information Disclosure Vulnerability

LOW 32

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00473 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-39820 CVE-2026-55122 · GHSA-wqv8-972g-whq4

Microsoft Excel Information Disclosure Vulnerability

LOW 32

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00525 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-49146 CVE-2026-70328 · GHSA-w8qr-fj2w-hvr6

Microsoft Excel Information Disclosure Vulnerability

LOW 31

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-125

TI-2026-49145 CVE-2026-70327 · GHSA-2q7m-9rpm-xprw

Microsoft Excel Information Disclosure Vulnerability

LOW 31

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-125

TI-2026-39761 CVE-2026-55054 · GHSA-959p-g3cm-4rcv

Microsoft Excel Information Disclosure Vulnerability

LOW 31

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-37362 CVE-2026-50678 · GHSA-r583-mmgv-j5q5

Microsoft Excel Information Disclosure Vulnerability

LOW 30

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 6.6 Local No auth User interaction EPSS 0.00472 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122

TI-2026-39696 CVE-2026-54988 · GHSA-cpg5-9rxq-hxph

Microsoft Excel Information Disclosure Vulnerability

LOW 28

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00461 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-48384 CVE-2026-68808 · GHSA-4pc4-7j3h-jqh9

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-125

TI-2026-48378 CVE-2026-68802 · GHSA-xm9g-6f9f-23pj

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-125

TI-2026-48375 CVE-2026-68799 · GHSA-4p3r-qjm5-hfpj

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-908

TI-2026-48373 CVE-2026-68797 · GHSA-c5cq-7c9q-gfxq

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 +2 CWE-125

TI-2026-39836 CVE-2026-55138 · GHSA-v936-2qfp-r4vf

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-822

TI-2026-39753 CVE-2026-55046 · GHSA-jmxw-46f3-mx5p

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-37147 CVE-2026-50408 · GHSA-99rr-9h5v-ch7f

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125

TI-2026-35937 CVE-2026-48580 · GHSA-pfh5-rjff-pjjg

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-822