BaselineWatch
Desk

CVE-2026-68813

5.5 medium SSVC exploitation: none Analyzed

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 4

  1. Cpes+11 CPE criteria (now 11)NVD modified 2026-10-23 23:10
  2. StatusPublished → AnalyzedNVD modified 2026-10-23 23:10
  3. CVSS5.5 (v3.1, CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) → 5.5 (v3.1, CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)NVD modified 2026-10-23 23:10
  4. First seenCVSS 5.5 · microsoftNVD modified 2026-10-21 20:52

Affected (CPE criteria) 11

  • cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
  • cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
  • cpe:2.3:a:microsoft:microsoft_365:-:*:*:*:*:macos:*:*
  • cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x64:*
  • cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x86:*
  • cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x64:*
  • cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x86:*
  • cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:macos:-:*
  • cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:*
  • cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x86:*
  • cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:macos:-:*

References 1