cve 2026 56156

The cve 2026 56156 tag covers discussion of a Microsoft Excel remote code execution vulnerability disclosed in Microsoft's July 14, 2026 security releases. The available coverage focuses on why the issue is described as remote code execution while its CVSS attack vector is Local: exploitation requires malicious content to be processed on the victim's device, rather than direct network access to Excel. It also identifies the underlying weakness as a heap-based buffer overflow and examines the potential impact of successful exploitation. Use this page to follow explanations of the vulnerability's scoring, exploitation requirements, and Microsoft security-release context.