{"id":"CVE-2026-68804","aliases":[],"cve":{"records":[{"id":"CVE-2026-68804","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-31T16:41:44.242Z","published":"2026-08-11T17:07:07.683Z","modified":"2026-10-30T17:22:53.762Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-10-30T17:22:53.762Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-08-12T03:57:47.470Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68804","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-197","description":"CWE-197: Numeric Truncation Error","source":"microsoft"},{"id":"CWE-122","description":"CWE-122: Heap-based Buffer Overflow","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*","versionStartIncluding":"16.0.0.0","versionEndExcluding":"16.0.10417.20175"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.112.26081010"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.112.26081010"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:*","versionStartIncluding":"16.0.0.0","versionEndExcluding":"16.0.5565.1001"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"16.112.26081010"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-08-07T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Microsoft Excel Remote Code Execution Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","score":7.8,"severity":"high","published":"2026-08-11T17:07:07.683Z","modified":"2026-10-30T17:22:53.762Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Microsoft 365 Apps for Enterprise","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Microsoft Excel 2016","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.5565.1001","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Microsoft Office 2019","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Microsoft Office 365 for Mac","platforms":[],"versions":[{"version":"1.0.0","status":"affected","lessThan":"16.112.26081010","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2021","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2024","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Microsoft Office LTSC for Mac 2021","platforms":[],"versions":[{"version":"16.0.1","status":"affected","lessThan":"16.112.26081010","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Microsoft Office LTSC for Mac 2024","platforms":[],"versions":[{"version":"16.0.0","status":"affected","lessThan":"16.112.26081010","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"},{"vendor":"Microsoft","name":"Office Online Server","platforms":[],"versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.10417.20175","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68804"],"sources":[{"name":"CVE","id":"CVE-2026-68804","modified":"2026-10-30T17:22:53.762Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7.8}],"sourceAffected":[],"observedAt":"2026-10-30T19:02:50.901Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T16:15:33.392Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T01:45:31.816Z","attemptedAt":"2026-10-29T01:45:31.816Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T01:45:31.537Z","attemptedAt":"2026-10-29T01:45:31.537Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T01:45:31.816Z","attemptedAt":"2026-10-29T01:45:31.816Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-29T01:45:31.599Z","attemptedAt":"2026-10-29T01:45:31.599Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-pr9p-842j-v7hq","url":"https://github.com/advisories/GHSA-pr9p-842j-v7hq","modified":"2026-08-11T18:31:49Z","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T01:45:31.537Z"},{"source":"FIRST EPSS","id":"CVE-2026-68804","url":"https://www.first.org/epss/","probability":0.00466,"percentile":0.40292,"date":"2026-10-28","checkedAt":"2026-10-29T01:45:31.599Z"},{"source":"NVD","id":"CVE-2026-68804","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68804","modified":"2026-08-13T16:18:50.653","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T01:45:31.816Z"},{"source":"ENISA EUVD","id":"EUVD-2026-56758","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56758","modified":"Oct 28, 2026, 8:08:32 PM","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-10-29T01:45:31.816Z"}],"aiSummary":{"text":"A numeric truncation error in Microsoft Excel allows an unauthorized attacker to execute code locally, affecting versions including Microsoft 365 Apps for Enterprise 16.0.1, Microsoft Excel 2016 16.0.0.0, and others. The required attacker access is not specified. The stated impact is code execution.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T08:56:43.130Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-68804"}]}}