CVEDB API

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 29.3%

CVSS Severity

CVSS v3 Score 7.8

References

Products affected by CVE-2026-44817

Microsoft » 365 Apps » Version: N/A

cpe:2.3:a:microsoft:365_apps:-
Microsoft » Excel » Version: 2016

cpe:2.3:a:microsoft:excel:2016
Microsoft » Microsoft 365 » Version: N/A

cpe:2.3:a:microsoft:microsoft_365:-
Microsoft » Office 2019 » Version: N/A

cpe:2.3:a:microsoft:office_2019:-
Microsoft » Office 2021 » Version: N/A

cpe:2.3:a:microsoft:office_2021:-
Microsoft » Office 2024 » Version: N/A

cpe:2.3:a:microsoft:office_2024:-
Microsoft » Office Online Server » Version: N/A

cpe:2.3:a:microsoft:office_online_server:-