{"id":"CVE-2026-118704","kind":"vulnerability","aliases":["CVE-2026-118704"],"related":[],"title":"Microsoft Excel: stack buffer overflow lets a remote attacker run code","description":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","summary":"A stack-based buffer overflow in Microsoft Excel lets an unauthorized attacker run code over a network. The sources do not name the affected Excel versions or a fixed build.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["excel","microsoft-office","other","windows"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:45+00:00","first_seen_at":"2026-11-10T19:24:52+00:00","triaged_at":"2026-11-10T19:29:47+00:00","updated_at":"2026-11-10T19:29:47+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T19:29:47Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft Excel: stack buffer overflow lets a remote attacker run code","impact":"high","summary":"A stack-based buffer overflow in Microsoft Excel lets an unauthorized attacker run code over a network. The sources do not name the affected Excel versions or a fixed build.","audience":"everyone","category":"other","nicknames":[],"who_cares":["excel","microsoft-office","windows"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code on the machine through a crafted network-delivered file","analyst_note":"Find Microsoft's advisory for CVE-2026-118704 to confirm affected builds, the fixed update, and whether user interaction (opening a file) is required.","how_to_check":"- unknown","plain_action":"Update Microsoft Excel through Microsoft's update channel once a fix is listed for your version.","product_name":"Microsoft Excel","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Anyone running an affected version of Microsoft Excel, most likely on Windows or Mac machines that open spreadsheets from email or the web. The sources do not say which Excel builds or file paths are exposed, so the exact scope is unknown.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000701,"input_tokens":4496,"output_tokens":502,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find Microsoft's advisory for CVE-2026-118704 to confirm affected builds, the fixed update, and whether user interaction (opening a file) is required.","search":"'-118704':14A,17A '-2026':13A,16A 'affect':48B 'allow':64C 'attack':9A,36B,67C 'base':27B,57C 'buffer':4A,28B,58C 'build':54B 'code':11A,38B,70C 'cve':12A,15A 'excel':2A,18B,32B,49B,63C 'execut':69C 'fix':53B 'let':6A,33B 'microsoft':1A,20B,31B,61C 'microsoft-offic':19B 'name':46B 'network':41B,73C 'offic':21B,62C 'overflow':5A,29B,59C 'remot':8A 'run':10A,37B 'sourc':43B 'stack':3A,26B,56C 'stack-bas':25B,55C 'unauthor':35B,66C 'version':50B 'window':23B","nicknames":[],"mitigations":[],"who_affected":"Anyone running an affected version of Microsoft Excel, most likely on Windows or Mac machines that open spreadsheets from email or the web. The sources do not say which Excel builds or file paths are exposed, so the exact scope is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Update Microsoft Excel through Microsoft's update channel once a fix is listed for your version.","pkeys":[],"ptokens":[],"labels":["excel","high","microsoftoffice","other","windows"],"campaign_type":null,"search_a":"'-118704':14A,17A '-2026':13A,16A 'attack':9A 'buffer':4A 'code':11A 'cve':12A,15A 'excel':2A 'let':6A 'microsoft':1A 'overflow':5A 'remot':8A 'run':10A 'stack':3A","search_b":"'affect':48B 'attack':36B 'base':27B 'buffer':28B 'build':54B 'code':38B 'excel':18B,32B,49B 'fix':53B 'let':33B 'microsoft':20B,31B 'microsoft-offic':19B 'name':46B 'network':41B 'offic':21B 'overflow':29B 'run':37B 'sourc':43B 'stack':26B 'stack-bas':25B 'unauthor':35B 'version':50B 'window':23B","search_c":"'allow':64C 'attack':67C 'base':57C 'buffer':58C 'code':70C 'excel':63C 'execut':69C 'microsoft':61C 'network':73C 'offic':62C 'overflow':59C 'stack':56C 'stack-bas':55C 'unauthor':66C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:45+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118704","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118704","severity":null,"published_at":"2026-11-10T19:19:45+00:00","modified_at":"2026-11-10T19:19:45+00:00","first_seen_at":"2026-11-10T19:24:52+00:00","fetched_at":"2026-11-10T19:24:52+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}