Back to vendor advisories
Microsoft Security Response CenterCVE-2026-118732

Microsoft Office Excel Remote Code Execution Vulnerability

HighVendor CVSS 8.8 / 10 1 CVE Published Nov 10, 2026 at 8:00 AM UTC

Summary

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Products covered

  • Microsoft Office LTSC for Mac 2021

  • Microsoft Office LTSC for Mac 2024

  • Microsoft Office 365 for Mac

  • Office Online Server

  • Microsoft Office LTSC 2021 for 64-bit editions

  • Microsoft Office LTSC 2021 for 32-bit editions

  • Microsoft Office LTSC 2024 for 64-bit editions

  • Microsoft Office LTSC 2024 for 32-bit editions

Show 2 more products
  • Microsoft 365 Apps for Enterprise for 64-bit Systems

  • Microsoft 365 Apps for Enterprise for 32-bit Systems

Remediation

Release Notes Install KB5002946.

Vendor-listed fixes

  • 16.115.26110837

  • 16.0.10417.20236

  • 16.0.14334.21048

  • 16.0.17932.21140

  • https://aka.ms/OfficeSecurityReleases

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.