All news & advisories
Medium

CVE-2026-88154: Security Advisory

CVE-2026-88154 CVSS 6.5
Who it affects
See the summary below.
What to do
Apply the vendor's update in your next patch window.

CVE-2026-88154

Severity: MEDIUM (CVSS 6.5)

Status: Not exploited in the wild (KEV list status unknown)

Vulnerability: Out-of-bounds read in Microsoft Office Excel allows unauthorized information disclosure over a network.

Affected Product:

  • Microsoft Defender Business

Remediation: Review Microsoft Security Response Center (MSRC) guidance at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88154 for patch availability and deployment instructions.


Last Updated: Current date

Data as of October 14, 2026. Sources: nvd.nist.gov, msrc.microsoft.com. Figures are pulled from public vendor and security data and refreshed automatically.
Back to all news & advisories