medium5.5
CVE-2026-81401
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Impact
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Excel | Version 2016 |
| Microsoft | Microsoft 365 | All versions |
| Microsoft | Office 2016 | All versions |
| Microsoft | Office 2019 | All versions |
| Microsoft | Office 2021 | All versions |
| Microsoft | Office 2024 | All versions |
| Microsoft | Office Online Server | before 16.0.10417.20207 |