Back Api.Msrc.Microsoft

CVE-2026

Api.Msrc.Microsoft • March 10, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Microsoft Office Excel (CVE-2026) Microsoft Office Excel has multiple vulnerabilities that allow unauthorized attackers to execute code locally. These include an out-of-bounds read, use after free, untrusted pointer dereference, heap-based buffer overflow, and type confusion. A cross-site scripting vulnerability also allows information disclosure over a network. 14 sources 72

Extracted Entities

CVE-2026

The full story

Extracted Entities

Attack Types (1)

Platforms (1)

Vulnerabilities (1)