Analysis and contextual insights are available on OpenCVE Cloud.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 16 Jul 2026 02:45:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft office Online Server
|
|
| Vendors & Products |
Microsoft office Online Server
|
Wed, 15 Jul 2026 14:30:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 14 Jul 2026 19:45:00 +0200
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
| Title | Microsoft Excel Remote Code Execution Vulnerability | |
| First Time appeared |
Microsoft
Microsoft 365 Apps Microsoft excel 2016 Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft office 365 Microsoft office Macos 2021 Microsoft office Macos 2024 |
|
| Weaknesses | CWE-843 | |
| CPEs | cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:* cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:* cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:* cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:* |
|
| Vendors & Products |
Microsoft
Microsoft 365 Apps Microsoft excel 2016 Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft office 365 Microsoft office Macos 2021 Microsoft office Macos 2024 |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-10-08T18:16:34.739Z
Reserved: 2026-06-16T14:12:44.285Z
Link: CVE-2026-55025
Updated: 2026-07-15T11:11:53.622Z
Status : Analyzed
Published: 2026-07-14T18:18:13.190
Modified: 2026-07-15T18:39:28.117
Link: CVE-2026-55025
No data.
OpenCVE Enrichment
Updated: 2026-07-31T09:15:03Z
-
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')