CVE-2025-62563

CVE-2025-62563 is a Use-After-Free vulnerability in Microsoft Excel that allows local code execution. The issue affects Microsoft Excel/Office components and is described in multiple feeds (CVE entry, EUVD/NCSC/CIRCL sightings, and vendor advisories). The core flaw is use-after-free in Excel, ena...

CVE-2025-62556

Microsoft Excel remote code execution vulnerability CVE-2025-62556 is triggered by an untrusted pointer dereference in Excel, enabling local code execution. The issue is tied to Microsoft Office Excel components; multiple Nessus/NCSC/EUVD listings corroborate the family of Office Excel vulnerabil...

CVE-2025-62564

CVE-2025-62564 affects Microsoft Excel within Office. The vulnerability is an out-of-bounds read in Excel that enables a local attacker to execute arbitrary code. CVSSv3.1 reflects a local attack with high impact (C/H/I/A = High) and no privileges required, with user interaction required. Microso...

CVE-2026-26112

CVE-2026-26112 is a Microsoft Excel remote code execution vulnerability caused by an untrusted pointer dereference in Excel. The issue affects Microsoft Office Excel components and can lead to the execution of arbitrary code on a vulnerable system, with local exploit requirements and user interac...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2025-62203

CVE-2025-62203 is a use-after-free vulnerability in Microsoft Excel (part of Microsoft Office ) that can allow a local attacker to achieve remote code execution . The issue arises in Excel’s handling of certain objects, enabling an attacker to run arbitrary code on the affected system with the us...

CVE-2025-59225

CVE-2025-59225 is a Microsoft Excel Remote Code Execution vulnerability caused by a use-after-free. The vulnerability allows a local attacker to execute code on a vulnerable system. Various security advisories and update plugins confirm Excel-related fixes in October 2025 releases (MSRC/KB5002794...

CVE-2025-62202

CVE-2025-62202 is an out-of-bounds read vulnerability in Microsoft Excel that can allow a local attacker to disclose information. Connected sources confirm the issue in Microsoft Excel/Office components and indicate a coordinated patch release in November 2025 (e.g., Office/Excel security updates...

CVE-2025-62561

CVE-2025-62561 is Microsoft Excel remote code execution due to an untrusted pointer dereference in Office Excel. The vulnerability affects Microsoft Excel as part of the Office suite; exploitation would allow code execution on a local host. Connected advisories confirm the issue in Excel and list...

CVE-2025-60726

Microsoft Excel is affected by CVE-2025-60726 (Out-of-bounds read) which enables a local attacker to disclose sensitive data. The vulnerability is described as a information disclosure in Excel, with CVSS 3.1 score 7.1 (High) and local attack vector requiring user interaction. Connected sources c...

CVE-2026-21258

CVE-2026-21258 is an Excel-related vulnerability described as improper input validation that could allow a local attacker to disclose information. The metric indicates a medium-severity CVSS v3.1 base score of 5.5 (LOCAL, low attack complexity, no privileges required, user interaction required) w...

CVE-2026-32189

CVE-2026-32189 affects Microsoft Excel. The vulnerability allows Remote Code Execution with a Local attack vector, requiring user interaction, and does not require privileges. The base CVSSv3.1 rating is 7.8 (HIGH) with impact on confidentiality, integrity, and availability. Root cause details ar...

CVE-2026-55138

CVE-2026-55138 is an information disclosure vulnerability affecting Microsoft Excel (Office). The issue is caused by an untrusted pointer dereference in Excel, allowing a local attacker to disclose information on the affected system. CVSS shows a Local attack vector, user interaction required, wi...

CVE-2025-59233

CVE-2025-59233 is a Microsoft Excel remote code execution vulnerability caused by a resource access/type confusion issue in Excel/Office. The issue allows an attacker with local access to cause code execution on the vulnerable system, with the CVSS v3.1 base score 7.8 (HIGH): Local attack vector,...

CVE-2025-59224

CVE-2025-59224 affects Microsoft Excel (Office) with a use-after-free in Excel that allows local code execution. The CVSSv3.1 base metrics indicate a HIGH impact, with local attack vector, no user privileges required, and user interaction needed. Microsoft and partners reference security updates ...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-55058

CVE-2026-55058 is an out-of-bounds read vulnerability in Microsoft Office Excel . The issue enables a local attacker to achieve remote code execution on a vulnerable system, as indicated by the CVSS vector: LOCAL attack, LOW attack complexity, with no privileges required and user interaction need...

CVE-2025-62200

CVE-2025-62200 is a Microsoft Excel remote code execution vulnerability described as an untrusted pointer dereference in Excel, enabling a local attacker to run arbitrary code. The CVE is tied to Microsoft Office Excel components and is reflected in multiple advisories and CVE records, with CVSS ...

CVE-2025-62201

CVE-2025-62201 is a Microsoft Excel remote code execution vulnerability. Connected sources confirm a heap-based buffer overflow in Excel that can let an attacker run arbitrary code on the affected system. Affected product: Microsoft Office Excel. Root cause: heap-based buffer overflow in Excel co...

CVE-2026-55041

CVE-2026-55041 is a heap-based buffer overflow in Microsoft Office Excel that can allow a local attacker to execute arbitrary code. The issue affects Excel (and is reflected in the overall Office ecosystem advisories) and arises from a heap overflow in a component used by Excel. The CVSS v3.1 vec...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...

CVE-2026-50675

CVE-2026-50675 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code on the affected system. The connected sources confirm the issue is tied to Excel, with a high-severity CVSS 3.1 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No specific vul...

CVE-2026-54988

CVE-2026-54988 is an out-of-bounds read vulnerability affecting Microsoft Excel, enabling a local attacker to disclose information. The existing sources confirm the vulnerability in Microsoft Office Excel with local access requiring user interaction, but do not specify exact vulnerable versions, ...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55137

CVE-2026-55137 in Microsoft Excel is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized, locally executed code when a user opens a malicious file or link. The CVSS 3.1 vector (L, L, N, R, U, C/H/I/H/A/H) indicates a HIGH-severity, local attack requiring user intera...

CVE-2026-50678

CVE-2026-50678: A heap-based buffer overflow in Microsoft Excel (Office) allows local information disclosure. CVSS v3.1 base score 6.6 (Medium): AV:L, AC:L, PR:N, UI:R, S:U, C:L, I:L, A:H. No exploit details are provided in the accompanying documents; remediation status/patch info not specified.

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55031

CVE-2026-55031 is a Microsoft Office Excel vulnerability described as an out-of-bounds read that allows a locally authenticated attacker to execute code. The CVSS‑3.1 vector is Local, with Low attack complexity, and no privileges required, but user interaction is required and the impact is High f...

CVE-2026-55036

CVE-2026-55036 is a Microsoft Office Excel vulnerability described as a buffer over-read that allows an attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and no privileges required but user interaction is required. The descrip...

CVE-2026-55037

CVE-2026-55037 affects Microsoft Office Excel. A heap-based buffer overflow in Excel allows an unauthenticated/unauthorized attacker to execute arbitrary code locally. The CVSSv3.1 vector indicates a local attack with low attack complexity, no privileges required, but user interaction is required...

CVE-2026-55044

CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel; vulnerability allows a local attacker to execute code. Affected product: Microsoft Office Excel. Root cause: out-of-bounds read (details not expanded in the provided docs). Impact: remote code execution on the local host with high seve...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2026-55947

CVE-2026-55947 is a Microsoft Excel vulnerability described as a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. Affected product: Microsoft Office Excel (Office suite). Root cause: heap-based buffer overflow in Excel components, leading to arbitrary code e...

CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...

CVE-2026-55029

CVE-2026-55029 is a heap-based buffer overflow affecting Microsoft Excel (part of Microsoft Office). The connected sources consistently describe the vulnerability as allowing an unauthenticated attacker to execute arbitrary code locally by crafting a malicious Excel/Office file, with the impact d...

CVE-2026-55053

CVE-2026-55053 – Microsoft Excel heap-based buffer overflow in Microsoft Office Excel enables a local attacker to execute arbitrary code. The issue is described as a heap-based overflow affecting Excel, with the CVSS v3.1 vector indicating local attack, low attack complexity, and user interaction...

CVE-2026-55122

Technical details for CVE-2026-55122 are not publicly provided in the connected documents. The materials reference Excel Office vulnerabilities generally without specifics. Monitor for updates.

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-55948

CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2026-55024

CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...

CVE-2026-55039

CVE-2026-55039 affects Microsoft Excel (Office suite). The vulnerability is described as an integer underflow/wraparound in Excel that can allow an attacker to execute arbitrary code locally. According to the CVE record and linked advisories, the impact is remote code execution on the target mach...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...

CVE-2026-55054

CVE-2026-55054 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read. The issue affects Excel and can leak data over a network; exploitation requires user interaction (per CVSS metrics: Network vector, Low attack complexity, No privileges, User inter...

CVE-2026-55136

CVE-2026-55136 affects Microsoft Excel (part of Microsoft Office). The vulnerability is caused by an untrusted pointer dereference in Excel, enabling a local attacker to execute code on the affected system. CVSS 3.1 base score 7.8 (HIGH) with local access, no privileges required, user interaction...