Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability
CVE-2026-118708 Published on November 10, 2026
Microsoft Office Excel Remote Code Execution Vulnerability
Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Weakness Type
Release of Invalid Pointer or Reference
The application attempts to return a memory resource to the system, but calls the wrong release function or calls the appropriate release function incorrectly.
Products Associated with CVE-2026-118708
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
