7.8
CVE-2026-45469
- EPSS 0.37%
- Veröffentlicht 09.06.2026 17:17:21
- Zuletzt bearbeitet 23.07.2026 08:10:00
- Erkennungen
Microsoft Excel Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Microsoft 365 Version - SwPlatform macos
Microsoft ≫ Office 2019 Version - HwPlatform x64
Microsoft ≫ Office 2019 Version - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform macos HwPlatform -
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform macos HwPlatform -
Microsoft ≫ Office Online Server Version -
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.289 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-122 Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-191 Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45469