---
id: "CVE-2026-124183"
page: "https://infrastack.ai/live/CVE-2026-124183"
kind: "vulnerability"
aliases: ["CVE-2026-124183"]
title: "Microsoft Excel: buffer over-read lets a network attacker disclose information"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["excel", "microsoft-office", "other", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:47+00:00"
first_seen_at: "2026-11-10T19:25:13+00:00"
updated_at: "2026-11-10T19:56:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124183", "first_seen_at": "2026-11-10T19:25:13+00:00"}]
exploit_sources: []
---

# Microsoft Excel: buffer over-read lets a network attacker disclose information

Link for people: https://infrastack.ai/live/CVE-2026-124183 (this .md is for agents)

A buffer over-read in Microsoft Office Excel lets an unauthorized attacker read memory beyond the intended buffer over the network. The attacker can disclose information, but the sources do not say that code runs or that data is changed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124183

## From the sources

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_