7.8
CVE-2026-55899
- EPSS 0.3%
- Veröffentlicht 14.07.2026 17:05:10
- Zuletzt bearbeitet 16.07.2026 11:51:04
- CVE-Watchlists
- Unerledigt
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Microsoft 365 Version- SwPlatformmacos
Microsoft ≫ Office 2019 Version- HwPlatformx64
Microsoft ≫ Office 2019 Version- HwPlatformx86
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatform- HwPlatformx64
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatform- HwPlatformx86
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatformmacos HwPlatform-
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatform- HwPlatformx64
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatform- HwPlatformx86
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatformmacos HwPlatform-
Microsoft ≫ Office Online Server Version < 16.0.10417.20175
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.223 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-121 Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55899