| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-105718 | Microsoft Excel Remote Code Execution Vulnerability | Microsoft 365, Microsoft Office | Critical | 03-11-2026 |
Technical Information
An unauthenticated attacker could exploit an out-of-bounds read and improper input validation vulnerability in Microsoft Excel by crafting a malicious Office file and convincing a user to open it, enabling remote code execution on the affected system.
Patch release date: Oct 13, 2026
Further information on this vulnerability is available at : CVE-2026-105718
Affected Software
Microsoft Office 365 for Mac,Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC for Mac 2024,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft 365 Apps for Enterprise for 32-bit Systems,
Office Online Server