M365 Change Tracker

← All changes · security · CVE-2026-97003

CVE-2026-97003ImportantMonitor

Microsoft Office Excel Remote Code Execution Vulnerability

Severity Important  ·  Urgency Monitor

Why it matters: Important severity (CVSS 8.8)

Remote Code Execution · Important · CVSS 8.8. Affects: Office Online Server, Microsoft Office LTSC, Microsoft 365 Apps, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac.

CVSS 8.8EPSS 0.8%Security update published 2026-11-10Applies to Cloud + on-premisesKB5002928NVD

Affected: Office Online Server, Microsoft Office LTSC, Microsoft 365 Apps, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac

Related changes

Change history

2026-10-13 · First captured by tracker

View at Microsoft →