CVE-2026-88151: Microsoft Office Excel Information Disclosure Vulnerability
Microsoft Office Excel Information Disclosure Vulnerability
Other sources
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.17932.21056 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.14334.20974 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases
Event History
Frequently Asked Questions
What does an attacker need to do to exploit this issue?
The attacker must cause a user to interact with malicious content. No attacker privileges are required, and the vulnerability can be exploited over a network.
Which Office deployments are identified as affected?
The listed affected products are Microsoft 365 Apps for Enterprise and Microsoft Office LTSC 2021 and LTSC 2024, for both 32-bit and 64-bit editions where specified.
What is the likely security impact?
Successful exploitation can disclose information. The provided severity vector indicates high confidentiality impact, with no integrity or availability impact.