Medium · 5.5 CVE-2026-81387 EUVD-2026-73856GHSA-wpwv-7jvw-vgv5

Microsoft Excel Information Disclosure Vulnerability

Published Sep 8, 2026 · Updated Nov 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft 365 Apps for Enterprise Product: Microsoft Excel 2016 Product: Microsoft Office 2016 Product: Microsoft Office 2019 Product: Microsoft Office 365 for Mac Product: Microsoft Office LTSC 2021 Product: Microsoft Office LTSC 2024 Product: Microsoft Office LTSC for Mac 2021 Product: Microsoft Office LTSC for Mac 2024

Description

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft 365 Apps for Enterprise	16.0.1 – < 16.0.20326.20138	16.0.20326.20138
Microsoft	Microsoft Excel 2016	16.0.0.0 – < 16.0.5569.1003	16.0.5569.1003
Microsoft	Microsoft Office 2016	16.0.0 – < 16.0.5569.1003	16.0.5569.1003
Microsoft	Microsoft Office 2019	19.0.0 – < 16.0.10417.20207	16.0.10417.20207
Microsoft	Microsoft Office 365 for Mac	1.0.0 – < 16.113.26091433	16.113.26091433
Microsoft	Microsoft Office LTSC 2021	16.0.1 – < 16.0.14334.20906	16.0.14334.20906
Microsoft	Microsoft Office LTSC 2024	16.0.0 – < 16.0.17932.20976	16.0.17932.20976
Microsoft	Microsoft Office LTSC for Mac 2021	16.0.1 – < 16.113.26091433	16.113.26091433
Microsoft	Microsoft Office LTSC for Mac 2024	16.0.0 – < 16.113.26091433	16.113.26091433

Advisories 3

MSRC-CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability Microsoft Security Response Center · Sep 17, 2026
WID-SEC-2026-3234 Microsoft Office Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 8, 2026
NCSC-2026-0352 Kwetsbaarheden verholpen in Microsoft Office NCSC-NL (Netherlands) · Sep 8, 2026

References

Microsoft Excel Information Disclosure Vulnerability vendor-advisory patch