ThreatCluster

Multiple CVEs Discovered in Microsoft Products

First seen 15 Sep 2026, 21:04 UTC • •57

Article Content

1 / 7

Browse articles

ThreatCluster •September 16, 2026 at 20:55 UTC

•CVE-2026-55053 and CVE-2026-68812 allow local code execution in Microsoft Excel.
•CVE-2026-69486 enables remote code execution in Microsoft Edge.
•User interaction is required to exploit these vulnerabilities.

On September 15, 2026, Microsoft disclosed several vulnerabilities affecting its products, including CVE-2026-55053 and CVE-2026-68812, both related to heap-based buffer overflows in Microsoft Office Excel. These vulnerabilities allow unauthorized attackers to execute code locally, requiring user interaction to exploit. Additionally, CVE-2026-69486, a remote code execution vulnerability in Microsoft Edge (Chromium-based), was also published, enabling attackers to execute code over a network. The attack vector for Excel vulnerabilities is local, while Edge's vulnerability allows for network exploitation. Users are advised to be cautious when opening files from untrusted sources. All vulnerabilities were last updated on September 15, 2026, and patches are expected to be released shortly.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 3h ago How this analysis works

Timeline

2026-09-15

CVE-2026-55053 published

Heap-based buffer overflow in Microsoft Office Excel allows local code execution with user interaction.

Api.Msrc.Microsoft

2026-09-15

CVE-2026-68812 published

Another heap-based buffer overflow in Microsoft Office Excel, similar to CVE-2026-55053, allowing local code execution.

Api.Msrc.Microsoft

2026-09-15

CVE-2026-69486 published

Remote code execution vulnerability in Microsoft Edge (Chromium-based) allows exploitation over a network.

Api.Msrc.Microsoft

More articles in this cluster (6)

Threat Graph

10 entities, 17 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Phishing
Zero-day Exploit
T1203 - Exploitation for Client Execution
T1566.001 - Spearphishing Attachment

Vulnerability (1)

CVE-2026-69486

Weakness (1)

Cwe-122 - Heap-based Buffer Overflow

Indicator (1)

0ccbbf129444eb66344ccafb92b00df4

Affected Platform (3)

Microsoft Edge
Microsoft Office
Microsoft Office Excel

Relationships

CVE-2026-69486 targets Microsoft Edge
CVE-2026-69486 targets Microsoft Office
CVE-2026-69486 targets Microsoft Office Excel
Phishing targets Microsoft Edge
Phishing targets Microsoft Office
Phishing targets Microsoft Office Excel
Zero-day Exploit targets Microsoft Edge
Zero-day Exploit targets Microsoft Office
Zero-day Exploit targets Microsoft Office Excel
T1203 - Exploitation for Client Execution targets Microsoft Edge
T1203 - Exploitation for Client Execution targets Microsoft Office
T1203 - Exploitation for Client Execution targets Microsoft Office Excel
T1566.001 - Spearphishing Attachment targets Microsoft Edge
T1566.001 - Spearphishing Attachment targets Microsoft Office
T1566.001 - Spearphishing Attachment targets Microsoft Office Excel
CVE-2026-69486 related to Cwe-122 - Heap-based Buffer Overflow
CVE-2026-69486 related to 0ccbbf129444eb66344ccafb92b00df4

Following this threat?

Track CVE-2026-69486 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches A critical CVE-2026-85706 path-traversal vulnerability in GitLab (CVSS 10.0) was exploited in the wild just hours after its disclosure on September 12, 2026. Microsoft released its largest-ever patch batch, addressing 974 vulnerabilities, including several actively exploited Windows flaws. The GitLab flaw allows…