Dashboard / CVE-2026-81394

CVE-2026-81394

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 36/100
Published: 2026-09-08 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: None
A: None

Description

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 < 16.0.20326.20138
Microsoft Microsoft Excel 2016 16.0.0.0 < 16.0.5569.1003
Microsoft Microsoft Office 2016 16.0.0 < 16.0.5569.1003
Microsoft Microsoft Office 2019 19.0.0 < 16.0.10417.20207
Microsoft Microsoft Office 365 for Mac 1.0.0 < 16.113.26091433
Microsoft Microsoft Office LTSC 2021 16.0.1 < 16.0.14334.20906
Microsoft Microsoft Office LTSC 2024 16.0.0 < 16.0.17932.20976
Microsoft Microsoft Office LTSC for Mac 2021 16.0.1 < 16.113.26091433
Microsoft Microsoft Office LTSC for Mac 2024 16.0.0 < 16.113.26091433

References & Advisories (1)

Bug Bounty Relevance

36 / 100
✓ No authentication
✓ Low complexity

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.55%
Raw Score 0.005530
Percentile 46.2%
Date 2026-10-30

Intelligence Sources

mitre ref →

External Links