7.7
CVSS
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
Severity: HIGH
📦
excel
Vendor: microsoft
Actively Exploited
6
CISA KEV List
PoC / Exploits
40
Code Available
Total RCEs
174
Remote Access
Total CVEs
5421
Total Indexed
Avg. EPSS
28.25%
Exploit Prob.
Security Vulnerability Index
Page 1 / 543
7.8
CVSS
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Severity: HIGH
7.8
CVSS
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Severity: HIGH
7.8
CVSS
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Severity: HIGH
7.8
CVSS
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Severity: HIGH
7.8
CVSS
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Severity: HIGH
7.8
CVSS
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Severity: HIGH
7.8
CVSS
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Severity: HIGH
7.1
CVSS
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Severity: HIGH
7.1
CVSS
CVE-2026-26133
RCE
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Severity: HIGH