Microsoft’s advisory for CVE-2026-26109 calls it a “Microsoft Excel Remote Code Execution Vulnerability,” yet the published CVSS vector lists the Attack Vector as Local (AV:L) — an apparent contradiction that has confused many defenders. The short, practical answer is this: the CVE title is...