CVE-2026

Back Api.Msrc.Microsoft

CVE-2026

Api.Msrc.Microsoft • March 10, 2026

Share: View original

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Microsoft Office Excel (CVE-2026) Microsoft Office Excel has multiple vulnerabilities that allow unauthorized attackers to execute code locally. These include an out-of-bounds read, use after free, untrusted pointer dereference, heap-based buffer overflow, and type confusion. A cross-site scripting vulnerability also allows information disclosure over a network. 14 sources 72

Extracted Entities

Attack Types (1)

Zero-day Exploit

MITRE ATT&CK (1)

T1203 - Exploitation for Client Execution

Platforms (1)

Microsoft Office Excel