Read the docs
Microsoft update

KB5002904

Security Update

View on Microsoft →

Fixed in

Fixes 30 records

Priority MEDIUM 42

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20140, 16.0.5569.1003 +4 CWE-122
Priority LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-416
Priority LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-121
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 36

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-415
Priority LOW 36

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-190
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-121
Priority LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-121
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 33

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00369 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 26

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-908
Priority LOW 26

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-843
Priority LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 26

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-126
Priority LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 26

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00553 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-497
Priority LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 26

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-908
Priority LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority LOW 26

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00553 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-497