7.1
High
CVE-2026-45649 Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally
Description
Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Excel for Android 16.0 | 16.0.0.0 → < 16.0.20131.20024 | 16.0.20131.20024 |
| Microsoft PowerPoint for Android 16.0 | 16.0.0.0 → < 16.0.20131.20024 | 16.0.20131.20024 |
| Microsoft Word for Android 16.0 | 16.0.0.0 → < 16.0.20131.20024 | 16.0.20131.20024 |
References
- Office for Android Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Excel for Android
The 7 CVEs of Microsoft Excel for Android →
CVE-2026-44812
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally
7.8
High
CVE-2026-44803
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally
7.8
High
CVE-2026-42832
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally
7.7
High
CVE-2026-41100
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally
4.4
Medium