Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
References
| Link | Resource |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44817 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Jun 2026, 18:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x64:* cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:* cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x86:* cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:* cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:* cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:macos:-:* cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:macos:-:* cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x86:* cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:* cpe:2.3:a:microsoft:microsoft_365:-:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x86:* |
|
| References | () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44817 - Vendor Advisory | |
| First Time |
Microsoft office 2019
Microsoft office 2021 Microsoft office 2024 Microsoft microsoft 365 Microsoft excel Microsoft office Online Server Microsoft Microsoft 365 Apps |
09 Jun 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-09 17:17
Updated : 2026-06-11 18:38
NVD link : CVE-2026-44817
Mitre link : CVE-2026-44817
CVE.ORG link : CVE-2026-44817
JSON object : View
Products Affected
microsoft
- excel
- office_online_server
- 365_apps
- office_2021
- office_2019
- microsoft_365
- office_2024
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')