← Database

CVE-2026-20957

HIGH CVSS: 7.8 Published: 2026-01-13 Modified: 2026-06-17

Description

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected Platforms

Microsoft 365 AppsMicrosoft Office Online ServerMicrosoft Office Long Term Servicing ChannelMicrosoft ExcelMicrosoft Office

Weakness Type

CWE-122, CWE-191

References