CVE-2026-81950 – Microsoft Excel Remote Code Execution Vulnerability
CVSS 7.8
IMPORTANT
Critical - Same Day Deployment
“A malicious Office file can turn a routine document open into remote code execution, putting sensitive data and system integrity at risk.”
CVE-2026-81950 is a Critical remote code execution vulnerability in Microsoft Excel and affected Microsoft Office products. The vulnerability is caused by a double-free memory condition. An attacker must convince a user to open a malicious Office file, after which code execution may occur locally without the attacker requiring privileges. The Preview Pane is not an attack vector. The vulnerability is not publicly disclosed or known to be exploited.
Key Details
- Affected Product
- Microsoft 365 Apps
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-415
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.