CVE-2026-45459
LOW
3,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none
Description
AI Translation Available
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0006
Percentile
0,2th
Updated
EPSS Score Trend (Last 5 Days)
693
Protection Mechanism Failure
DraftCommon Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Applicable Platforms
Technologies:
Not Technology-Specific, ICS/OT
Application
Office 2021 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:macos:-:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Microsoft 365 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:microsoft_365:-:*:*:*:*:macos:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
365 Apps by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Office 2024 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Office 2024 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:macos:-:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Office 2024 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x86:*
Common Platform Enumeration - Standardized vulnerability identification
Application
365 Apps by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
Common Platform Enumeration - Standardized vulnerability identification
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45459