CVE-2026-62870: Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Details
Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62870
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-62870 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for Microsoft Excel Remote
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-55037: Microsoft Excel Remote Code Execution Vulnerabilitymsrc · 2026-07-14
- highCVE-2026-54131: Microsoft Excel Remote Code Execution Vulnerabilitymsrc · 2026-07-14
- highCVE-2026-56156: Microsoft Excel Remote Code Execution Vulnerabilitymsrc · 2026-07-14
- highCVE-2026-55039: Microsoft Excel Remote Code Execution Vulnerabilitymsrc · 2026-07-14
- highCVE-2026-50675: Microsoft Excel Remote Code Execution Vulnerabilitymsrc · 2026-07-14
- highCVE-2026-55141: Microsoft Excel Remote Code Execution Vulnerabilitymsrc · 2026-07-14
More from Microsoft Security Response Center
- highCVE-2026-42900: Microsoft Windows App Store Elevation of Privilege Vulnerability2026-07-14
- mediumCVE-2026-55003: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability2026-07-14
- highCVE-2026-57992: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability2026-07-14
- unknownCVE-2026-13867: Chromium: CVE-2026-13867 Inappropriate implementation in Geolocation2026-07-14
- mediumCVE-2026-59926: Mistune: XSS via unescaped class option in Admonition directive2026-07-14