Skip to content
fr Sign in
7.8 High

CVE-2026-81396 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Description

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected products and versions

Product Affected versions Fixed in
Microsoft 365 Apps for Enterprise 16.0 16.0.1 → < 16.0.20326.20138 16.0.20326.20138
Microsoft Excel 2016 16.0 16.0.0.0 → < 16.0.5569.1003 16.0.5569.1003
Microsoft Office 2016 16.0 16.0.0 → < 16.0.5569.1003 16.0.5569.1003
Microsoft Office 2019 16.0 earliest → < 16.0.10417.20207 16.0.10417.20207
Microsoft Office 365 for Mac 1.0 1.0.0 → < 16.112.26083020 16.112.26083020
Microsoft Office LTSC 2021 16.0 16.0.1 → < 16.0.14334.20906 16.0.14334.20906
Microsoft Office LTSC 2024 16.0 16.0.0 → < 16.0.17932.20976 16.0.17932.20976
Microsoft Office LTSC for Mac 2021 16.0 16.0.1 → < 16.112.26083020 16.112.26083020
Microsoft Office LTSC for Mac 2024 16.0 16.0.0 → < 16.112.26083020 16.112.26083020
Show the other branch
Product Affected versions Fixed in
Office Online Server 16.0 16.0.0.0 → < 16.0.10417.20207 16.0.10417.20207

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft 365 Apps for Enterprise

The 931 CVEs of Microsoft 365 Apps for Enterprise →
CVE-2026-108454 Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network 6.5 Medium CVE-2026-108455 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network 6.5 Medium CVE-2026-108453 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network 6.5 Medium CVE-2026-108451 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High
Track this CVE