PT-2026-58299 · Microsoft · 365 Apps For Enterprise+8

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-48580

Mitre

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix

Untrusted Pointer Dereference

Weakness Enumeration

CWE-822

Related Identifiers

CVE-2026-48580

Affected Products

365 Apps For Enterprise

Excel 2016

Office 2019

Office 365 For Mac

Office Ltsc 2021

Office Ltsc 2024

Office Ltsc For Mac 2021

Office Ltsc For Mac 2024

Office Online Server

References · 2

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48580 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48580 · Security Note