CVE-2026-81951 – Microsoft Excel Remote Code Execution Vulnerability

CVSS 7.8 IMPORTANT Critical - Same Day Deployment

“A malicious Excel file can turn a routine document open into code execution, putting sensitive data and system integrity at risk.”

CVE-2026-81951 is a heap-based buffer overflow vulnerability in Microsoft Excel that can allow an unauthorized attacker to execute code locally. Exploitation requires a malicious Office file to be sent to a user and convincing that user to open it. No privileges are required, but user interaction is required. The Preview Pane is not an attack vector.

Key Details

Affected Product
Microsoft 365 Apps
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
CWE Classification
CWE-122
Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.