<< Back
CVE Number Vulnerability Product Severity Date
CVE-2026-26107 Microsoft Excel Remote Code Execution Vulnerability Microsoft Office High 18-08-2026

Technical Information

A Use After Free vulnerability in Microsoft Excel where if a victim opens a malicious Excel file it may lead to arbitrary code execution.

Patch release date: Mar 10, 2026
Further information on this vulnerability is available at : CVE-2026-26107

Affected Software

Office Online Server,
Microsoft Office 2019 for 32-bit editions,
Microsoft Office 2019 for 64-bit editions,
Microsoft 365 Apps for Enterprise for 32-bit Systems,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC for Mac 2024,
Microsoft Excel 2016 (32-bit edition),
Microsoft Excel 2016 (64-bit edition)