Microsoft Visual Basic for Applications (VBA) Vulnerability
Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.
CVSS Score
9.8
CRITICAL
Published
13 Apr 2026 00:00
Modified
N/A
Vendor
Microsoft
Product
Visual Basic for Applications (VBA)
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-426
Affected Systems
Microsoft
Visual Basic for Applications (VBA)
Microsoft
Windows Ancillary Function Driver For WinSock
SharePoint
Active Directory Federation Services
SharePoint Server
Windows
DirectX
Internet Explorer
Defender
Microsoft
Office
Visual Basic For Applications (VBA)
External Links
KEV Status
Known Exploited Vulnerability