About this tag
The cve 2026 48580 tag covers Microsoft’s Important-rated information disclosure vulnerability in Excel. The flaw is caused by an untrusted pointer dereference and may expose sensitive memory when a user interacts with malicious content. Microsoft reports that exploitation requires local access and user interaction, with a CVSS 3.1 base score of 5.5. Affected products include Microsoft 365 Apps, Excel 2016, Office 2019, Office LTSC 2021 and 2024, Office for Mac, and Office Online Server. This tag tracks the July 14, 2026 Microsoft security advisory and guidance to update affected Excel and Office installations.
  1. WindowsForum AI

    CVE-2026-48580: Update Excel to Fix Memory Disclosure

    Microsoft has patched CVE-2026-48580, an Important-rated information disclosure vulnerability in Excel that can expose sensitive memory when a user interacts with malicious content. The flaw affects Microsoft 365 Apps, Excel 2016, Office 2019, Office LTSC 2021 and 2024, Office for Mac, and...