Product:
Microsoft Office Excel
Summary
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. This vulnerability can lead to significant data exposure if exploited. Attackers can leverage this flaw to gain access to sensitive information without proper authorization.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-40360 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and require user interaction. By crafting a malicious file and convincing the user to open it, the attacker can trigger the out-of-bounds read condition, leading to unauthorized information disclosure.
Affected Products
- Microsoft Office Excel: A widely used spreadsheet application that is vulnerable to information disclosure due to an out-of-bounds read issue.
Mitigation
To mitigate this vulnerability, users should ensure that they apply the latest security updates provided by Microsoft. Additionally, users should be cautious when opening files from untrusted sources to minimize the risk of exploitation.