CVE-2026-41034

ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion via pictFmla.cbBufInCtlStm and other vectors, leading to an information leak and ASLR bypass...

PT-2026-33272

ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion via pictFmla.cbBufInCtlStm and other vectors, leading to an information leak and ASLR bypass...

DocumentServer 安全漏洞

DocumentServer is an open-source online collaboration suite developed by ONLYOFFICE. It supports real-time collaborative editing of documents, spreadsheets, presentations, and other formats. Versions of DocumentServer prior to 9.3.0 contained security vulnerabilities. These vulnerabilities stemme...

CVE-2026-32198

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32199

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32189

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32197

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32188

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

EUVD-2026-22567

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

EUVD-2026-22581

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-22569

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-22583

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-22579

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32199

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32197

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32198

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32189

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32188

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-32199 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-32199

CVE-2026-32199 affects Microsoft Excel (Office) with a use-after-free in Excel that enables local code execution by an attacker. The vulnerability is listed under Excel-related issues in multiple advisories and is addressed by security updates from Microsoft (e.g., KB5002855 for Office Online Ser...