cve 2026 26108

CVE-2026-26108 is a high-impact heap-based buffer overflow vulnerability in Microsoft Excel that was patched on Microsoft's March 10, 2026 Patch Tuesday. The flaw allows an attacker to execute code in the context of the current user if a crafted Excel file is opened. The update is part of a broader security release that fixed multiple Office and Windows issues. Microsoft published update packages for various Office editions and server products, advising customers to install all applicable updates. This tag covers discussions about the vulnerability, its mitigations, and deployment strategies for the patch.