CVE-2026-81959: Microsoft Excel Remote Code Execution Vulnerability
Published Sep 8, 2026
·Updated
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Other sources
Microsoft Excel Remote Code Execution Vulnerability
— Microsoft
Affected Software
1 affected component
Microsoft Excel
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:19 PM
Data Sourced
via MITRE·05:19 PM
DescriptionSeverity
Frequently Asked Questions
1
What access and conditions does an attacker need to exploit this issue?
The attack vector is local, so the attacker needs local access to the affected system. No privileges are required, but user interaction is required for exploitation.
2
What is the potential impact of successful exploitation?
Successful exploitation can allow local code execution. The supplied vector rates confidentiality, integrity, and availability impact as high.