396 matches found
PT-2026-32578
MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administrator exports the application chat history to an Excel file .xlsx via the...
CVE-2026-26109
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-26107
CVE-2026-26107 is a Microsoft Excel remote code execution vulnerability described as a use-after-free issue in Excel/Office. Affected software is Microsoft Excel within the Office suite; the underlying cause is use-after-free in Excel, enabling an attacker to execute code locally. Exploitation is...
CVE-2026-26112 Microsoft Excel Remote Code Execution Vulnerability
...
Description of the security update for Office 2016: March 10, 2026 (KB5002718)
None None...
Description of the security update for Office Online Server: March 10, 2026 (KB5002846)
None None...
CVE-2026-21259 Microsoft Excel Elevation of Privilege Vulnerability
...
CVE-2026-21259
CVE-2026-21259 is a heap-based buffer overflow in Microsoft Excel (Office) that enables local privilege escalation. Multiple sources (MSRC advisory, CNVD, CIRCL sightings, KB entries) confirm Excel as the affected product and indicate that Microsoft released February 2026 security updates (e.g., ...
Security Updates for Microsoft Office Products (February 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the february-10-2026 advisory. - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-20952 - Untrusted pointer dereference...
Microsoft Excel Code Execution Vulnerability (CNVD-2026-08746)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code...
CVE-2026-20955
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20955
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20957
CVE-2026-20957 is a Microsoft Excel/Office vulnerability caused by an integer underflow in Excel that could allow an attacker to execute code locally. The issue affects Microsoft Excel components across Office products (including Excel on Office Online Server and Excel 2016) and is documented as ...
Description of the security update for Office Online Server: January 13, 2026 (KB5002824)
None None...
Microsoft Excel Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Excel 资源管理错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Excel. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are...
CVE-2025-62556 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-62553 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-62553
CVE-2025-62553 affects Microsoft Excel (Office) with a use-after-free in Excel leading to local arbitrary code execution. The vulnerability, tracked across multiple advisories (CNVD/CNNVD/MSVCVE/NCSc) and confirmed by MSRC, is mitigated by December 2025 Office security updates (e.g., KB5002818/KB...