M365 Change Tracker

← All changes · security · CVE-2026-124170

CVE-2026-124170CriticalMonitor

Microsoft Office Excel Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 7.5)

Remote Code Execution · Critical · CVSS 7.5. Affects: Microsoft Office LTSC for Mac, Microsoft Office 365 for Mac, Microsoft Office LTSC, Microsoft 365 Apps, Office Online Server.

CVSS 7.5Security update published 2026-11-11Applies to Cloud + on-premisesKB5002946NVD

Affected: Microsoft Office LTSC for Mac, Microsoft Office 365 for Mac, Microsoft Office LTSC, Microsoft 365 Apps, Office Online Server

Related changes

Change history

2026-11-10 · First captured by tracker

View at Microsoft →