CVE-2026-50408 Details

A vulnerability allowing out-of-bounds read has been identified in Microsoft Office Excel. This issue could enable an unauthorized attacker to locally disclose information. The vulnerability arises from improper memory handling, which could allow an attacker to read sensitive data from memory.

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC 2024, 2021, and 2019 (both 32-bit and 64-bit editions), as well as Office Online Server, security updates are available. Additionally, for Microsoft Excel 2016 (both 32-bit and 64-bit editions), a security update can be downloaded. For Microsoft Office LTSC for Mac 2021 and 2024, and Microsoft 365 Apps for Enterprise (both 32-bit and 64-bit systems), security updates are also available.