جزئیات آسیب‌پذیری

CVE-2026-55949

Microsoft 365 Apps for EnterpriseMicrosoft ExcelMicrosoft OfficeMicrosoft Office 365 for MacMicrosoft Office LTSCMicrosoft Office LTSC for Mac

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1

7.8بالا

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

امتیاز	نسخه	منبع	بردار
7.8بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Microsoft 365 Apps for Enterprise	16.0.1 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Excel 2016	16.0.0.0 ≤ v < 16.0.5561.1001	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office 2019	19.0.0 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office 365 for Mac	1.0.0 ≤ v < 16.111.26071215	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC 2021	16.0.1 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC 2024	16.0.0 ≤ v < https://aka.ms/OfficeSecurityReleases	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC for Mac 2021	16.0.1 ≤ v < 16.111.26071215	CVEProject cvelistV5 (CNA)
Microsoft	Microsoft Office LTSC for Mac 2024	16.0.0 ≤ v < 16.111.26071215	CVEProject cvelistV5 (CNA)
Microsoft	Office Online Server	16.0.0.0 ≤ v < 16.0.10417.20175	CVEProject cvelistV5 (CNA)

۰٫۴۶٪

احتمال بهره‌برداری در ۳۰ روز

۴۰٫۵٪

صدک (نسبت به همه‌ی CVEها)