CVE-2026-81387

Summary

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1 < 16.0.20326.20138affected
MicrosoftMicrosoft Excel 201616.0.0.0 < 16.0.5569.1003affected
MicrosoftMicrosoft Office 201616.0.0 < 16.0.5569.1003affected
MicrosoftMicrosoft Office 201919.0.0 < 16.0.10417.20207affected
MicrosoftMicrosoft Office 365 for Mac1.0.0 < 16.113.26091433affected
MicrosoftMicrosoft Office LTSC 202116.0.1 < 16.0.14334.20906affected
MicrosoftMicrosoft Office LTSC 202416.0.0 < 16.0.17932.20976affected
MicrosoftMicrosoft Office LTSC for Mac 202116.0.1 < 16.113.26091433affected
MicrosoftMicrosoft Office LTSC for Mac 202416.0.0 < 16.113.26091433affected

Weaknesses

  • CWE-497: CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References