CVE-2026-32198 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-32189

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32189 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-32189 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-32189

CVE-2026-32189 affects Microsoft Excel. The vulnerability allows Remote Code Execution with a Local attack vector, requiring user interaction, and does not require privileges. The base CVSSv3.1 rating is 7.8 (HIGH) with impact on confidentiality, integrity, and availability. Root cause details ar...

CVE-2026-32188

CVE-2026-32188 appears to be an information-disclosure vulnerability in Microsoft Excel. The entry lists Excel as the affected product and indicates the vulnerability is exploitable locally with user interaction required, and it has high impact on confidentiality and availability. The CVSSv3.1 ve...

CVE-2026-32188 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-32188

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-32188 Microsoft Excel Information Disclosure Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

Description of the security update for Office Online Server: April 14, 2026 (KB5002855)

None None...

Description of the security update for Excel 2016: April 14, 2026 (KB5002860)

None None...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-39424

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administrator exports the application chat history to an Excel file .xlsx via the...

CVE-2026-39424

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administrator exports the application chat history to an Excel file .xlsx via the...

EUVD-2026-22186

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administrator exports the application chat history to an Excel file .xlsx via the...

GHSA-J98M-W3XP-9F56 excel-mcp-server has a Path Traversal issue

Summary A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode the documented way to use this server remotely, an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on...