Remote Code Execution Vulnerability in Microsoft Office Excel
CVE-2026-118716

8.8HIGH

Key Information:

Vendor: Microsoft
Status: Microsoft 365 Apps For Enterprise; Microsoft Office 365 For Mac; Microsoft Office Ltsc 2021; Microsoft Office Ltsc 2024
Vendor: CVE Published:; 10 November 2026

What is CVE-2026-118716?

A use after free vulnerability in Microsoft Office Excel may allow an unauthorized attacker to execute arbitrary code remotely, posing significant security risks for users. This vulnerability could be leveraged to exploit system weaknesses, necessitating timely updates and mitigations.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 365 for Mac 1.0.0 < 16.115.26110837

Microsoft Office LTSC 2021 32-bit Systems 16.0.1 < 16.0.14334.21048

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...

vendor-advisorypatch

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Oct 28, 2026

CVE-2026-118716 Data

JSON