CVE-2026

Back Api.Msrc.Microsoft

CVE-2026

Api.Msrc.Microsoft • March 10, 2026

Share: View original

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Microsoft Office Excel (CVE-2026) Microsoft Office Excel has multiple vulnerabilities that allow unauthorized attackers to execute code locally. These include an out-of-bounds read, use after free, untrusted pointer dereference, heap-based buffer overflow, and type confusion. A cross-site scripting vulnerability also allows information disclosure over a network. 14 sources 72

Extracted Entities

Platforms (1)

Microsoft Office Excel