You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
office parsing
About this tag
The tag 'office parsing' covers vulnerabilities and technical discussions related to how Microsoft Office applications parse documents. A key theme is the distinction between CVE titles describing remote code execution and CVSS metrics indicating local attack vectors, which is important for Windows administrators assessing risk. The content focuses on Office document parsing flaws, particularly in Excel, where malicious files can be delivered remotely but exploit code runs locally. This tag is relevant for IT professionals managing Office security, understanding CVSS scoring nuances, and evaluating threats from crafted Office documents.
Title: Why CVE-2026-20950 is labeled “Remote Code Execution” even though CVSS lists AV:L (Local) — a practical guide for Windows admins
Introduction
Short answer: “Remote” in the CVE title describes the attacker’s location (they can be off‑host and deliver a malicious file remotely); the CVSS...