Product:
Microsoft Office Excel
Summary
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. This vulnerability can lead to sensitive data exposure, impacting user confidentiality. Attackers can exploit this flaw if they have local access to the affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-32188 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system running Microsoft Office Excel. They can then craft a malicious file that triggers the out-of-bounds read condition, allowing them to access sensitive information stored in memory. User interaction is required to open the malicious file, making social engineering tactics a potential vector for exploitation.
Affected Products
- Microsoft Office Excel: Vulnerable to out-of-bounds read, allowing unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office Excel with all security updates applied. Additionally, restricting local access to sensitive systems and educating users about the risks of opening untrusted files can help reduce the likelihood of exploitation.