CVE-2026-118295

Microsoft remote code execution in Excel

high · 8.8

Fix listed

Microsoft 365 Apps for Enterprise

Published Nov 10, 2026, 18:24 UTC

Description

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

16.115.26110837, 16.0.14334.21048, 16.0.17932.21140, 16.0.10417.20236

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.