Microsoft Office Vulnerability
Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.
CVSS Score
9.8
CRITICAL
Published
14 Apr 2026 00:00
Modified
N/A
Vendor
Microsoft
Product
Office
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-94
Affected Systems
Microsoft
Office
Microsoft
Windows Ancillary Function Driver For WinSock
SharePoint
Active Directory Federation Services
SharePoint Server
Windows
DirectX
Internet Explorer
Defender
Microsoft
Office
Visual Basic For Applications (VBA)
External Links
KEV Status
Known Exploited Vulnerability