All news & advisories
High

CVE-2026-70254: Security Advisory

CVE-2026-70254 CVSS 8.8
Who it affects
See the summary below.
What to do
Apply the vendor's update in your next patch window.

CVE-2026-70254

Severity: HIGH (CVSS 8.8)

Description: Out-of-bounds read in Microsoft Office Excel allows code execution over a network.

Affected Product:

  • Microsoft Defender Business

KEV Status: Not currently listed as exploited in the wild

Remediation: Apply available security updates from Microsoft. Refer to the official advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70254

Recommendation: Prioritize patching due to high CVSS score and remote code execution potential.

Data as of October 14, 2026. Sources: nvd.nist.gov, msrc.microsoft.com. Figures are pulled from public vendor and security data and refreshed automatically.
Back to all news & advisories