CVE-2026-68793— Microsoft Excel Remote Code Execution Vulnerability
Quick assessment
Affected
Microsoft Microsoft 365 Apps for Enterprise
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Office Excel是美国Microsoft公司的一款电子表格处理软件。 Microsoft Office Excel 存在缓冲区错误漏洞，该漏洞源于越界读取，可能导致未经授权的攻击者在本地执行代码。受影响的版本包括：Microsoft Excel 2016 16.0.5565.1001之前版本、Microsoft Office 365 for Mac 16.112.26081010之前版本、Microsoft Office LTSC for Mac 2021 16.112.260
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 9
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1< https://aka.ms/OfficeSecurityReleases |
affected |
| Microsoft | Microsoft Excel 2016 | 16.0.0.0< 16.0.5565.1001 |
affected |
| Microsoft | Microsoft Office 2019 | 19.0.0< https://aka.ms/OfficeSecurityReleases |
affected |
| Microsoft | Microsoft Office 365 for Mac | 1.0.0< 16.112.26081010 |
affected |
| Microsoft | Microsoft Office LTSC 2021 | 16.0.1< https://aka.ms/OfficeSecurityReleases |
affected |
| Microsoft | Microsoft Office LTSC 2024 | 16.0.0< https://aka.ms/OfficeSecurityReleases |
affected |
| Microsoft | Microsoft Office LTSC for Mac 2021 | 16.0.1< 16.112.26081010 |
affected |
| Microsoft | Microsoft Office LTSC for Mac 2024 | 16.0.0< 16.112.26081010 |
affected |
| Microsoft | Office Online Server | 16.0.0.0< 16.0.10417.20175 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-68793
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Microsoft Excel Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Office Excel 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Office Excel是美国Microsoft公司的一款电子表格处理软件。 Microsoft Office Excel 存在缓冲区错误漏洞，该漏洞源于越界读取，可能导致未经授权的攻击者在本地执行代码。受影响的版本包括：Microsoft Excel 2016 16.0.5565.1001之前版本、Microsoft Office 365 for Mac 16.112.26081010之前版本、Microsoft Office LTSC for Mac 2021 16.112.260
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 ~ https://aka.ms/OfficeSecurityReleases | - |
|
| Microsoft | Microsoft Excel 2016 | 16.0.0.0 ~ 16.0.5565.1001 | - |
|
| Microsoft | Microsoft Office 2019 | 19.0.0 ~ https://aka.ms/OfficeSecurityReleases | - |
|
| Microsoft | Microsoft Office 365 for Mac | 1.0.0 ~ 16.112.26081010 | - |
|
| Microsoft | Microsoft Office LTSC 2021 | 16.0.1 ~ https://aka.ms/OfficeSecurityReleases | - |
|
| Microsoft | Microsoft Office LTSC 2024 | 16.0.0 ~ https://aka.ms/OfficeSecurityReleases | - |
|
| Microsoft | Microsoft Office LTSC for Mac 2021 | 16.0.1 ~ 16.112.26081010 | - |
|
| Microsoft | Microsoft Office LTSC for Mac 2024 | 16.0.0 ~ 16.112.26081010 | - |
|
| Microsoft | Office Online Server | 16.0.0.0 ~ 16.0.10417.20175 | - |
|
II. Public POCs for CVE-2026-68793
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-68793
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-68793 (1)
Same Patch Batch · Microsoft · 2026-08-11 · 402 CVEs total
| CVE-2026-62878 | 9.8 CRITICAL | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-65791 | 9.8 CRITICAL | Windows iSCSI Target Service Remote Code Execution Vulnerability |
| CVE-2026-62893 | 9.8 CRITICAL | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability |
| CVE-2026-62815 | 9.8 CRITICAL | Microsoft QUIC Remote Code Execution Vulnerability |
| CVE-2026-59124 | 9.8 CRITICAL | Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability |
| CVE-2026-50516 | 9.4 CRITICAL | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability |
| CVE-2026-70306 | 9.3 CRITICAL | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-65767 | 8.8 HIGH | Microsoft Teams for Android Spoofing Vulnerability |
| CVE-2026-57104 | 8.8 HIGH | Azure Storage Explorer Elevation of Privilege Vulnerability |
| CVE-2026-70326 | 8.8 HIGH | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2026-62795 | 8.8 HIGH | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability |
| CVE-2026-62817 | 8.8 HIGH | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-62816 | 8.8 HIGH | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2026-69320 | 8.8 HIGH | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-62872 | 8.8 HIGH | .NET Framework Elevation of Privilege Vulnerability |
| CVE-2026-62818 | 8.8 HIGH | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability |
| CVE-2026-66805 | 8.8 HIGH | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2026-70337 | 8.8 HIGH | Microsoft PowerShell Remote Code Execution Vulnerability |
| CVE-2026-70324 | 8.8 HIGH | Microsoft SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-62800 | 8.8 HIGH | Windows SMBv3 Server Remote Code Execution Vulnerability |
Showing top 20 of 402 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Microsoft 365 Apps for Enterprise
-
CVE-2026-70105
Microsoft Word Information Disclosure Vulnerability -
CVE-2026-70130
Microsoft Office Remote Code Execution Vulnerability -
CVE-2026-68814
Microsoft Excel Remote Code Execution Vulnerability -
CVE-2026-68817
Microsoft Excel Remote Code Execution Vulnerability -
CVE-2026-68812
Microsoft Excel Remote Code Execution Vulnerability
Same vendor: Microsoft
-
CVE-2026-62316
Microsoft UFO: DNS Rebinding → Unauthenticated File Read / C -
CVE-2026-69502
Azure SQL Database Elevation of Privilege Vulnerability -
CVE-2026-69855
Microsoft Copilot in Azure Information Disclosure Vulnerabil -
CVE-2026-69543
Azure Virtual Machines Elevation of Privilege Vulnerability -
CVE-2026-69558
Microsoft Partner Center Information Disclosure Vulnerabilit
Same weakness: CWE-125
-
CVE-2026-40015
IMAP-hibernate越界读致进程崩溃 -
CVE-2026-19315
Fireware OS Pre-Authentication Type Confusion in iked Allows -
CVE-2026-78009
Fireware OS Out-of-Bounds Read in iked Allows Unauthenticate -
CVE-2026-19317
Fireware OS Pre-Authentication Out-of-Bounds Read in iked Al -
CVE-2026-82072
Chrome 151 之前版本 V8 越界读取漏洞
V. Comments for CVE-2026-68793
No comments yet