7.8
CVE-2026-55899
- EPSS 0.3%
- Veröffentlicht 14.07.2026 17:05:10
- Zuletzt bearbeitet 16.07.2026 11:51:04
- Erkennungen
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Microsoft 365 Version - SwPlatform macos
Microsoft ≫ Office 2019 Version - HwPlatform x64
Microsoft ≫ Office 2019 Version - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform macos HwPlatform -
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform macos HwPlatform -
Microsoft ≫ Office Online Server Version < 16.0.10417.20175
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.223 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-121 Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55899