PT-2026-58299 · Microsoft · Office Excel

CVE-2026-48580

·

Published

2026-07-14

·

Updated

2026-07-15

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel (affected versions not specified)
Description An untrusted pointer dereference allows an unauthorized attacker to perform local information disclosure. This issue occurs when the software accesses a memory address through a pointer that has not been properly validated, potentially allowing a malicious spreadsheet to read sensitive data from the system memory.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10141
CVE-2026-48580

Affected Products

Office Excel