HIGH Published September 8, 2026

CVE-2026-81396

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS base score

7.8 (v3.1)

Severity

HIGH

Attack vector

Local

Weakness

CWE-121, CWE-193

Last modified

October 30, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

microsoft 365 apps microsoft excel microsoft microsoft 365 microsoft office 2016 microsoft office 2019 microsoft office 2021 microsoft office 2024

View full NVD advisory →

← Back to CVE watch