CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...

CVE-2026-50678

CVE-2026-50678: A heap-based buffer overflow in Microsoft Excel (Office) allows local information disclosure. CVSS v3.1 base score 6.6 (Medium): AV:L, AC:L, PR:N, UI:R, S:U, C:L, I:L, A:H. No exploit details are provided in the accompanying documents; remediation status/patch info not specified.

CVE-2026-55036

CVE-2026-55036 is a Microsoft Office Excel vulnerability described as a buffer over-read that allows an attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and no privileges required but user interaction is required. The descrip...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...

CVE-2026-55024

CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...

CVE-2026-55031

CVE-2026-55031 is a Microsoft Office Excel vulnerability described as an out-of-bounds read that allows a locally authenticated attacker to execute code. The CVSS‑3.1 vector is Local, with Low attack complexity, and no privileges required, but user interaction is required and the impact is High f...

CVE-2025-62561

CVE-2025-62561 is Microsoft Excel remote code execution due to an untrusted pointer dereference in Office Excel. The vulnerability affects Microsoft Excel as part of the Office suite; exploitation would allow code execution on a local host. Connected advisories confirm the issue in Excel and list...

CVE-2026-21259

CVE-2026-21259 is a heap-based buffer overflow in Microsoft Excel (Office) that enables local privilege escalation. Multiple sources (MSRC advisory, CNVD, CIRCL sightings, KB entries) confirm Excel as the affected product and indicate that Microsoft released February 2026 security updates (e.g., ...

CVE-2026-55029

CVE-2026-55029 is a heap-based buffer overflow affecting Microsoft Excel (part of Microsoft Office). The connected sources consistently describe the vulnerability as allowing an unauthenticated attacker to execute arbitrary code locally by crafting a malicious Excel/Office file, with the impact d...

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...

CVE-2025-62202

CVE-2025-62202 is an out-of-bounds read vulnerability in Microsoft Excel that can allow a local attacker to disclose information. Connected sources confirm the issue in Microsoft Excel/Office components and indicate a coordinated patch release in November 2025 (e.g., Office/Excel security updates...

CVE-2026-21258

CVE-2026-21258 is an Excel-related vulnerability described as improper input validation that could allow a local attacker to disclose information. The metric indicates a medium-severity CVSS v3.1 base score of 5.5 (LOCAL, low attack complexity, no privileges required, user interaction required) w...

CVE-2026-68812

CVE-2026-68812 concerns a heap-based buffer overflow in Microsoft Excel (Office) that can allow a locally executed arbitrary code execution when a user opens or processes a malicious file. The root cause is memory corruption inside Excel’s handling of data structures, leading to control of the pr...

CVE-2025-59225

CVE-2025-59225 is a Microsoft Excel Remote Code Execution vulnerability caused by a use-after-free. The vulnerability allows a local attacker to execute code on a vulnerable system. Various security advisories and update plugins confirm Excel-related fixes in October 2025 releases (MSRC/KB5002794...

CVE-2025-62203

CVE-2025-62203 is a use-after-free vulnerability in Microsoft Excel (part of Microsoft Office ) that can allow a local attacker to achieve remote code execution . The issue arises in Excel’s handling of certain objects, enabling an attacker to run arbitrary code on the affected system with the us...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2026-70327

CVE-2026-70327: Out-of-bounds read in Microsoft Office Excel allows an unauthenticated attacker to disclose information over a network. Affected product: Microsoft Excel; root cause: out-of-bounds read. Impact: information disclosure. CVSS: Network vector, high confidentiality impact, base score ...

CVE-2025-59233

CVE-2025-59233 is a Microsoft Excel remote code execution vulnerability caused by a resource access/type confusion issue in Excel/Office. The issue allows an attacker with local access to cause code execution on the vulnerable system, with the CVSS v3.1 base score 7.8 (HIGH): Local attack vector,...

CVE-2025-59224

CVE-2025-59224 affects Microsoft Excel (Office) with a use-after-free in Excel that allows local code execution. The CVSSv3.1 base metrics indicate a HIGH impact, with local attack vector, no user privileges required, and user interaction needed. Microsoft and partners reference security updates ...

CVE-2026-55039

CVE-2026-55039 affects Microsoft Excel (Office suite). The vulnerability is described as an integer underflow/wraparound in Excel that can allow an attacker to execute arbitrary code locally. According to the CVE record and linked advisories, the impact is remote code execution on the target mach...

CVE-2025-62201

CVE-2025-62201 is a Microsoft Excel remote code execution vulnerability. Connected sources confirm a heap-based buffer overflow in Excel that can let an attacker run arbitrary code on the affected system. Affected product: Microsoft Office Excel. Root cause: heap-based buffer overflow in Excel co...

CVE-2025-62200

CVE-2025-62200 is a Microsoft Excel remote code execution vulnerability described as an untrusted pointer dereference in Excel, enabling a local attacker to run arbitrary code. The CVE is tied to Microsoft Office Excel components and is reflected in multiple advisories and CVE records, with CVSS ...