Microsoft update

KB5002910

Security Update

View on Microsoft →

Fixed in

Office Online Server 16.0.10417.20207

Fixes 5 records

TI-2026-56562 CVE-2026-81956 · GHSA-4469-59cq-475f

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125

TI-2026-56553 CVE-2026-81947 · GHSA-g485-2f9g-56cp

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122

TI-2026-56190 CVE-2026-81396 · GHSA-57f5-cgpg-3p8c

Microsoft Excel Remote Code Execution Vulnerability

LOW 36

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-121

TI-2026-56195 CVE-2026-81401 · GHSA-f8m7-3hf4-56mm

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-843

TI-2026-56184 CVE-2026-81390 · GHSA-732g-6c4x-qqjr

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125