Microsoft labels CVE-2026-44820 as a Microsoft Excel Remote Code Execution vulnerability because a remote attacker can cause code to run on a victim’s computer, even though the CVSS attack vector is Local because the vulnerable Excel processing happens on the target machine. The apparent...