CVE-2026-88175 Advisory

Severity: MEDIUM (CVSS 6.5)

Affected Product:

• Microsoft Defender Business

Vulnerability Type: Out-of-bounds read in Microsoft Office Excel allowing information disclosure over a network.

KEV Status: Not currently exploited in the wild.

Remediation: Refer to Microsoft Security Response Center guidance: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88175

Apply available security updates per Microsoft’s advisory.