Multiple Vulnerabilities in Microsoft Office Excel (CVE-2026)

Api.Msrc.Microsoft

Multiple Vulnerabilities in Microsoft Office Excel (CVE-2026)

First seen 10 Mar 2026, 17:28 UTC • •72.0

Article Content

1 / 15

Browse articles

ThreatCluster •March 15, 2026 at 04:06 UTC

Microsoft Office Excel has multiple vulnerabilities that allow unauthorized attackers to execute code locally. These include an out-of-bounds read, use after free, untrusted pointer dereference, heap-based buffer overflow, and type confusion. A cross-site scripting vulnerability also allows information disclosure over a network.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 214d ago How this analysis works

Timeline

2026-03-10

CVE-2026 published detailing multiple vulnerabilities in Excel

More articles in this cluster (14)

Following this threat?

Track CVE-2019-17571 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18.…

Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…