Medium severity5.5NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026
CVE-2026-21261
CVE-2026-21261
Description
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected products
22- Microsoft/Microsoft 365 Apps for Enterprisev5Range: 16.0.1
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*+ 5 more
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:*:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:*:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*range: <16.0.10417.20097
- (no CPE)range: 16.0.0.0
- Range: 19.0.0
- Range: 16.0.0.0
16.0.1+ 1 more
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21261nvdVendor Advisory
News mentions
0No linked articles in our index yet.