CVE-Katalog

CVE-2026-32198

Use after free in Microsoft Office Excel allows an…

[CVE-Katalog]

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Schweregrad
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.29% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
UnknownRelease not reported365_appsNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedexcelNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedofficeNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedoffice_long_term_servicing_channelNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedoffice_online_server16.0.10417.20113UnknownSource applicability is not establishedProvider not reported
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reported365_appsNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedexcelNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedofficeNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedoffice_long_term_servicing_channelNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedoffice_online_server16.0.10417.20113UnknownSource applicability is not establishedProvider not reported
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "365_apps",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "excel",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "office",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "office_long_term_servicing_channel",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "office_online_server",
      "fixed_version": "16.0.10417.20113",
      "applicability_unknown": true
    },
    {
      "name": "365_apps",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32198",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-32198",
      "provider_updated_at": "2026-10-26T21:10:00.170"
    },
    {
      "name": "excel",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32198",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-32198",
      "provider_updated_at": "2026-10-26T21:10:00.170"
    },
    {
      "name": "office",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32198",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-32198",
      "provider_updated_at": "2026-10-26T21:10:00.170"
    },
    {
      "name": "office_long_term_servicing_channel",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32198",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-32198",
      "provider_updated_at": "2026-10-26T21:10:00.170"
    },
    {
      "name": "office_online_server",
      "ranges": [
        {
          "fixed": "16.0.10417.20113",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32198",
      "fixed_version": "16.0.10417.20113",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-32198",
      "provider_updated_at": "2026-10-26T21:10:00.170"
    }
  ]
}

OpenFactory catalog packages

Die Paketzuordnung läuft.

Beobachtet:

Referenzen

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]