PT-2026-24317 · Microsoft · Office Excel

F4 + 2 · Publicado 2026-03-10 · Atualizado 2026-04-07 · CVE-2026-26107

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel (affected versions not specified) Microsoft Office Microsoft 365 Apps for Enterprise Microsoft Office Online Server

Description A use-after-free issue exists in Microsoft Office Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server. This flaw could allow an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute arbitrary code and affect the system. The issue involves the use of memory after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2026-02975

CVE-2026-26107

Produtos afetados

Office Excel

Referências · 10

• https://safe-surf.ru/specialists/bulletins-nkcki/729785 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-26107 · Nota de Segurança
• https://t.me/avleonovcom/1637 · Publicação no Telegram
• https://msrc.microsoft.com/update-guide/advisory/CVE-2026-26107 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-26107 · Aviso do Fabricante
• https://twitter.com/RedHornet_Intel/status/2041626989459583306 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-02975 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26107 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26107 · Nota de Segurança
• https://twitter.com/CVEnew/status/2033361120270901400 · Publicação no Twitter