CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVE-2026-81394
Medium (5.5) in microsoft. EPSS 0.6% chance of exploitation in the next 30 days.
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWE
- CWE-497
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:365_apps
- microsoft:excel
- microsoft:microsoft_365
- microsoft:office_2016
- microsoft:office_2019
- microsoft:office_2021
- microsoft:office_2024