Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability
CVE-2026-118723 Published on November 10, 2026

Microsoft Office Excel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

Untrusted Pointer Dereference

The program obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.


Products Associated with CVE-2026-118723

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft 365 Apps for Enterprise: Microsoft Office 365 for Mac: Microsoft Office LTSC 2021: Microsoft Office LTSC 2024: Microsoft Office LTSC for Mac 2021: Microsoft Office LTSC for Mac 2024: Microsoft Office Online Server: