Dashboard / CVE-2026-68803

CVE-2026-68803

HIGH
MEDIUM Priority: 0.04 BB Relevance: 41/100
Published: 2026-08-11 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Weakness Classification (1)

Affected Software (31)

VendorProductVersion
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Excel 2016 16.0.0.0 < 16.0.5565.1001
Microsoft Microsoft Excel 2016 16.0.0.0 < 16.0.5565.1001
Microsoft Microsoft Office 2019 19.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office 2019 19.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office 365 for Mac 1.0.0 < 16.112.26081010
Microsoft Microsoft Office 365 for Mac 1.0.0 < 16.112.26081010
Microsoft Microsoft Office LTSC 2021 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC 2021 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC 2024 16.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC 2024 16.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC for Mac 2021 16.0.1 < 16.112.26081010
Microsoft Microsoft Office LTSC for Mac 2021 16.0.1 < 16.112.26081010
Microsoft Microsoft Office LTSC for Mac 2024 16.0.0 < 16.112.26081010
Microsoft Microsoft Office LTSC for Mac 2024 16.0.0 < 16.112.26081010
Microsoft Office Online Server 16.0.0.0 < 16.0.10417.20175
Microsoft Office Online Server 16.0.0.0 < 16.0.10417.20175
microsoft 365_apps -
microsoft 365_apps -
microsoft excel 2016
microsoft excel 2016
microsoft microsoft_365 -
microsoft office_2019 -
microsoft office_2019 -
microsoft office_2021 -
microsoft office_2021 -
microsoft office_2021 -
microsoft office_2024 -
microsoft office_2024 -
Showing 30 of 31 entries

References & Advisories (1)

Bug Bounty Relevance

41 / 100
✓ No authentication
✓ Low complexity

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.47%
Raw Score 0.004660
Percentile 40.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00466
2026-10-28
0.00466

Intelligence Sources

mitre ref →

External Links