cve 2026 55947

The cve 2026 55947 tag covers discussion of an Important-rated Microsoft Excel remote code execution vulnerability addressed in the July 14, 2026 Patch Tuesday updates. The reported flaw is a heap-based buffer overflow that may allow an unauthorized attacker to run code through a vulnerable Excel installation. Tagged coverage also explains the apparent tension between the remote code execution classification and the CVSS vector’s AV:L designation: the former describes the attacker’s potential position relative to the victim, while the latter indicates that the vulnerable Excel process must execute the exploit locally. Use this page to follow analysis of the vulnerability and its Microsoft security update context.