CVE-2026-123395

CVE-2026-123395CVE-2026-123395

Description

Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.

Scoring

CVSS 5.9 ()
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Last modified2026-11-11
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.