← Database

CVE-2026-21258

MEDIUM CVSS: 5.5 Published: 2026-02-10 Modified: 2026-06-17

Description

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected Platforms

Microsoft 365 AppsMicrosoft Office Online ServerMicrosoft Office Long Term Servicing ChannelMicrosoft ExcelMicrosoft Office

Weakness Type

CWE-20, CWE-125

References