CVE-2025-53739

Microsoft Excel remote code execution via a type confusion error (CVE-2025-53739) affects Office Excel engines when handling specially crafted files. The issue is described as an incompatible type resource access leading to local code execution. Publicly documented impact states attacker-controll...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...

CVE-2026-55947

CVE-2026-55947 is a Microsoft Excel vulnerability described as a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. Affected product: Microsoft Office Excel (Office suite). Root cause: heap-based buffer overflow in Excel components, leading to arbitrary code e...

CVE-2026-55024

CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...

CVE-2026-55029

CVE-2026-55029 is a heap-based buffer overflow affecting Microsoft Excel (part of Microsoft Office). The connected sources consistently describe the vulnerability as allowing an unauthenticated attacker to execute arbitrary code locally by crafting a malicious Excel/Office file, with the impact d...

CVE-2026-81951

CVE-2026-81951 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity, no privileges required, and user interaction required (i.e., a vict...

CVE-2025-54898

CVE-2025-54898 is a Microsoft Excel remote code execution vulnerability: an out-of-bounds read in Excel allows an attacker to run code locally on a user’s machine, with a local attack vector, no privileges required, and user interaction needed. The CVSS 3.1 vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/...

CVE-2025-59223

CVE-2025-59223 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free in Excel. Connected sources confirm this CVE is part of a broader October 2025 Office/Excel/Mac updates package and is addressed by security updates from Microsoft (e.g., KB5002794 for Excel 2016) a...

CVE-2025-59231

CVE-2025-59231 is a Microsoft Excel vulnerability described as a type-confusion in Excel that could allow an attacker with local access to execute code on the affected system. The associated Nessus findings and Microsoft advisories indicate multiple October 2025 office updates address this and re...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...

CVE-2025-53741

CVE-2025-53741 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow in Excel. The CVE is linked to Office/Excel components and is rated HIGH (CVSS: LOCAL, LOW-EXPLOITABILITY, requiring user interaction). Corporate advisories and MSRC update guides indica...

CVE-2025-54899

CVE-2025-54899 is an Excel Remote Code Execution vulnerability due to heap memory management error in Microsoft Excel/Office components (freeing memory on the heap). The CVE has a 3.1 base score of 7.8 (HIGH) with LOCAL exploit and USER INTERACTION required, per Microsoft advisory. Public referen...

CVE-2026-40360

CVE-2026-40360 is an information-disclosure vulnerability in Microsoft Excel caused by an out-of-bounds read, enabling a local attacker to disclose data. The available documents identify the affected product as Microsoft Excel and describe a local attack that could lead to confidential informatio...

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...

CVE-2026-70327

CVE-2026-70327: Out-of-bounds read in Microsoft Office Excel allows an unauthenticated attacker to disclose information over a network. Affected product: Microsoft Excel; root cause: out-of-bounds read. Impact: information disclosure. CVSS: Network vector, high confidentiality impact, base score ...

CVE-2026-78518

CVE-2026-78518 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no privileges required, but user interaction requi...

CVE-2025-54900

CVE-2025-54900 is a Microsoft Excel remote code execution vulnerability described as a heap-based buffer overflow in Excel that allows an attacker with local access to run code on the affected system. The CVE is documented for Microsoft Office Excel/Office products and is tracked with a high impa...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2025-62560

Microsoft Excel/Office contains a local-code-execution vulnerability due to an untrusted pointer dereference in Excel. Affected product: Microsoft Excel (part of Microsoft Office). Root cause: untrusted pointer dereference within Excel’s code path. Impact: local code execution with high confident...

CVE-2026-21258

CVE-2026-21258 is an Excel-related vulnerability described as improper input validation that could allow a local attacker to disclose information. The metric indicates a medium-severity CVSS v3.1 base score of 5.5 (LOCAL, low attack complexity, no privileges required, user interaction required) w...

CVE-2025-60726

Microsoft Excel is affected by CVE-2025-60726 (Out-of-bounds read) which enables a local attacker to disclose sensitive data. The vulnerability is described as a information disclosure in Excel, with CVSS 3.1 score 7.1 (High) and local attack vector requiring user interaction. Connected sources c...

CVE-2026-55039

CVE-2026-55039 affects Microsoft Excel (Office suite). The vulnerability is described as an integer underflow/wraparound in Excel that can allow an attacker to execute arbitrary code locally. According to the CVE record and linked advisories, the impact is remote code execution on the target mach...

CVE-2025-62203

CVE-2025-62203 is a use-after-free vulnerability in Microsoft Excel (part of Microsoft Office ) that can allow a local attacker to achieve remote code execution . The issue arises in Excel’s handling of certain objects, enabling an attacker to run arbitrary code on the affected system with the us...

CVE-2026-81388

CVE-2026-81388 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiali...

CVE-2025-59225

CVE-2025-59225 is a Microsoft Excel Remote Code Execution vulnerability caused by a use-after-free. The vulnerability allows a local attacker to execute code on a vulnerable system. Various security advisories and update plugins confirm Excel-related fixes in October 2025 releases (MSRC/KB5002794...

CVE-2025-62201

CVE-2025-62201 is a Microsoft Excel remote code execution vulnerability. Connected sources confirm a heap-based buffer overflow in Excel that can let an attacker run arbitrary code on the affected system. Affected product: Microsoft Office Excel. Root cause: heap-based buffer overflow in Excel co...

CVE-2025-62202

CVE-2025-62202 is an out-of-bounds read vulnerability in Microsoft Excel that can allow a local attacker to disclose information. Connected sources confirm the issue in Microsoft Excel/Office components and indicate a coordinated patch release in November 2025 (e.g., Office/Excel security updates...

CVE-2025-62561

CVE-2025-62561 is Microsoft Excel remote code execution due to an untrusted pointer dereference in Office Excel. The vulnerability affects Microsoft Excel as part of the Office suite; exploitation would allow code execution on a local host. Connected advisories confirm the issue in Excel and list...

CVE-2026-21259

CVE-2026-21259 is a heap-based buffer overflow in Microsoft Excel (Office) that enables local privilege escalation. Multiple sources (MSRC advisory, CNVD, CIRCL sightings, KB entries) confirm Excel as the affected product and indicate that Microsoft released February 2026 security updates (e.g., ...

CVE-2026-81399

CVE-2026-81399 is a buffer over-read vulnerability in Microsoft Office Excel that allows a local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction (e.g., opening a crafted file)...

CVE-2026-81954

CVE-2026-81954 is a use-after-free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction and no prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) , reflecting full impact on confidentiality, integrity, and a...

CVE-2025-59233

CVE-2025-59233 is a Microsoft Excel remote code execution vulnerability caused by a resource access/type confusion issue in Excel/Office. The issue allows an attacker with local access to cause code execution on the vulnerable system, with the CVSS v3.1 base score 7.8 (HIGH): Local attack vector,...

CVE-2026-81389

CVE-2026-81389 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction and has a high attack complexity , but no prior privileges are needed. The CVSS 3.1 score is 7.0 (HIGH) with full impa...

CVE-2025-59224

CVE-2025-59224 affects Microsoft Excel (Office) with a use-after-free in Excel that allows local code execution. The CVSSv3.1 base metrics indicate a HIGH impact, with local attack vector, no user privileges required, and user interaction needed. Microsoft and partners reference security updates ...

CVE-2026-81947

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally (CVSS v3.1 score 7.8 HIGH ). The attack requires user interaction (e.g., opening a malicious file) and no prior privileges. Impact spans confidentiality, integrity, and ...

CVE-2026-81390

CVE-2026-81390 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 base score is 5.5 (Medium) with High con...

CVE-2026-81391

CVE-2026-81391 is an information disclosure vulnerability in Microsoft Office Excel caused by a use of uninitialized resource . An unauthorized local attacker with user interaction can disclose information, rated CVSS 5.5 (Medium) with high confidentiality impact but no integrity or availability ...

CVE-2026-81956

CVE-2026-81956 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction (e.g., opening a malicious file) and needs no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with high impact to confi...

CVE-2026-81960

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve local code execution . The vulnerability requires user interaction (e.g., opening a malicious file) but no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with full impact to confidential...

CVE-2026-81392

CVE-2026-81392 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to disclose information . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction and a loca...

CVE-2026-81398

CVE-2026-81398 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning a local attack with low complexity requires user interaction (e.g....

CVE-2025-62200

CVE-2025-62200 is a Microsoft Excel remote code execution vulnerability described as an untrusted pointer dereference in Excel, enabling a local attacker to run arbitrary code. The CVE is tied to Microsoft Office Excel components and is reflected in multiple advisories and CVE records, with CVSS ...

CVE-2026-81401

CVE-2026-81401 is a type confusion vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The flaw stems from access of a resource using an incompatible type. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low comple...

CVE-2026-81395

CVE-2026-81395 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, no privileges required, and user interaction required, resulting in high confident...

CVE-2026-81393

CVE-2026-81393 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting a local attack vector , no privileges required , but user interaction required (e.g., opening a craf...

CVE-2026-81400

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, no privileges required, and user interaction required, resulting in a high impact to confidentiality with no ...

CVE-2026-81386

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally after a user opens a crafted file. The CVSS 3.1 score is 7.8 (High) with a local attack vector, low complexity, no privileges required, and user interaction required, re...

CVE-2026-81394

CVE-2026-81394 is an information disclosure vulnerability in Microsoft Office Excel . Exposure of sensitive system information to an unauthorized control sphere allows a local, unprivileged attacker to disclose information, provided the target user interacts with a crafted file. The CVSS 3.1 scor...

CVE-2026-81397

CVE-2026-81397 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack vector is local with low complexity and no privileges required, though user interaction is required (e.g., opening a crafted file). The CVSS 3.1 score ...

CVE-2026-81396

CVE-2026-81396 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction (e.g., opening a malicious file) but does not require prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) . The pri...