Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.
cve-program · CVE-2026-68807
Published
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-68807
PublishedMicrosoft 365 Apps for Enterprise
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft 365 Apps for Enterprise",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Excel 2016
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Excel 2016",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.0.0",
"lessThan": "16.0.5565.1001",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office 2019
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office 2019",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "19.0.0",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office 365 for Mac
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office 365 for Mac",
"versions": [
{
"version": "1.0.0",
"lessThan": "16.112.26081010",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC 2021
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC 2021",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC 2024
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC 2024",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.0",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC for Mac 2021
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2021",
"versions": [
{
"version": "16.0.1",
"lessThan": "16.112.26081010",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC for Mac 2024
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2024",
"versions": [
{
"version": "16.0.0",
"lessThan": "16.112.26081010",
"versionType": "custom",
"status": "affected"
}
]
}Office Online Server
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Office Online Server",
"versions": [
{
"version": "16.0.0.0",
"lessThan": "16.0.10417.20175",
"versionType": "custom",
"status": "affected"
}
]
}Original source record · Cite this exact observation · Complete original publisher JSON