CVE search · CVE-2026-123395
CVE-2026-123395
medium 5.9
Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.
Details
- Status
- Undergoing Analysis
- Published
- Last changed
- Source
- secure@microsoft.com
- Weakness
- CWE-94
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.9 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N |
secure@microsoft.comSecondary |