Remote Code Execution Flaw in Microsoft Office Excel
CVE-2026-118712
8.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 10 November 2026
What is CVE-2026-118712?
An integer underflow vulnerability in Microsoft Office Excel enables an unauthorized attacker to execute arbitrary code over a network. This flaw could be exploited to gain control over affected systems, potentially allowing unauthorized access to sensitive data and functionalities. Users are advised to apply the relevant security patches provided by Microsoft to mitigate this risk. For more details, you can refer to the official advisory.
Affected Version(s)
Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1
Microsoft Office 365 for Mac 1.0.0 < 16.115.26110837
Microsoft Office LTSC 2021 32-bit Systems 16.0.1 < 16.0.14334.21048