Microsoft’s CVE-2026-45469 describes a Microsoft Excel remote code execution vulnerability in which the CVSS attack vector is local because exploitation requires code to run on the target machine, typically after a user opens or executes attacker-supplied content. The apparent contradiction is...