cve 2026 26109

  1. Remote Delivery, Local Execution: Explaining CVE-2026-26109 in Excel

    Microsoft’s advisory for CVE-2026-26109 calls it a “Microsoft Excel Remote Code Execution Vulnerability,” yet the published CVSS vector lists the Attack Vector as Local (AV:L) — an apparent contradiction that has confused many defenders. The short, practical answer is this: the CVE title is...