Vulnerability Bulletins

CVE-2026-123395

   
Affected software MICROSOFT
 
Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-123395