PT-2026-2749 · Microsoft · Office Excel

Publicado 2026-01-13 · Atualizado 2026-01-13 · CVE-2026-20949

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel (affected versions not specified)

Description An improper access control issue exists in Microsoft Office Excel. This allows an unauthorized attacker to bypass a security feature locally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2026-00635

CVE-2026-20949

Produtos afetados

Office Excel

Referências · 5

• https://twitter.com/CVEnew/status/2011142889909178440 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-20949 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20949 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-00635 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-20949 · Nota de Segurança