MEDIUM 5.5 NVD

CVE-2026-81394

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information loc

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected Products

microsoft/365_apps
microsoft/excel
microsoft/microsoft_365
microsoft/office_2016
microsoft/office_2019
microsoft/office_2021
microsoft/office_2024

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81394

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-09-08 via NVD. Affected: microsoft/365_apps, microsoft/excel, microsoft/microsoft_365 and 4 more.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.