Medium September 9, 2026

CVE-2026-81394: Security Advisory

CVE-2026-81394 CVSS 5.5

Who it affects: See the summary below.
What to do: Apply the vendor's update in your next patch window.

CVE-2026-81394

CVSS Score: 5.5 (MEDIUM)
KEV Exploited: No

Affected Product:

Microsoft Defender Business

Vulnerability Description: Information disclosure vulnerability in Microsoft Office Excel that allows unauthorized local attackers to access sensitive system information through an unauthorized control sphere.

Remediation: Consult Microsoft Security Response Center for patches and updates: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81394

Data as of September 9, 2026. Sources: nvd.nist.gov, msrc.microsoft.com. Figures are pulled from public vendor and security data and refreshed automatically.

Back to all news & advisories