CVE-2026-55141 Details

A stack-based buffer overflow vulnerability has been identified in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction, as an attacker must send a malicious Office file and convince the user to open it. It is important to note that while the vulnerability is exploited locally, it can lead to remote code execution from the perspective of the attacker.

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Office LTSC 2021, Office 2019, and Excel 2016, security updates are available via the Microsoft Update Catalog or through the Office Update mechanism. For Office LTSC for Mac 2021 and 2024, the security update can be downloaded from the Microsoft AutoUpdate tool. Office 365 for Mac users can also use the Microsoft AutoUpdate tool to apply the security update.