Description of the security update for Office Online Server: February 10, 2026 (KB5002835)

🗓️ 10 Feb 2026 16:00:00Reported by MicrosoftType

Security update for Office Online Server fixes Excel disclosure and elevation vulnerabilities.

Reporter	Title	Published	Views	Family All 46
ATTACKERKB	CVE-2026-21261	10 Feb 202617:51	–	attackerkb
ATTACKERKB	CVE-2026-21259	10 Feb 202617:51	–	attackerkb
ATTACKERKB	CVE-2026-21258	10 Feb 202617:51	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.	13 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing attackers to exploit their privileges.	13 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office products and Microsoft 365 Apps for Enterprise allows a perpetrator to disclose protected information.	16 Feb 202600:00	–	bdu_fstec
Circl	CVE-2026-21258	10 Feb 202617:30	–	circl
Circl	CVE-2026-21259	10 Feb 202617:30	–	circl
Circl	CVE-2026-21261	10 Feb 202617:30	–	circl
CNNVD	Microsoft Excel 缓冲区错误漏洞	10 Feb 202600:00	–	cnnvd