Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Patch Tuesday plugin: office_online_server (smb_nt_ms26_mar_office_online_server.nasl)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the march-10-2026 advisory.

  - Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-26113)

  - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2026-26107)

  - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code     locally. (CVE-2026-26108)

  - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2026-26109)

  - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code     locally. (CVE-2026-26112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities:

  - Remote code execution vulnerabilities that an attacker can exploit to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2026-26107, CVE-2026-26108, CVE-2026-26109, CVE-2026-26112)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2026-26144)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. (CVE-2026-26107, CVE-2026-26108, CVE-2026-26109, CVE-2026-26112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities:

  - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2026-26107)

  - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code     locally. (CVE-2026-26108)

  - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2026-26109)

  - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code     locally. (CVE-2026-26112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
301784	Security Updates for Microsoft Office Products (March 2026) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
301778	Security Updates for Microsoft Excel Products C2R (March 2026)	Nessus	Windows	Local	high
301766	Security Updates for Microsoft Excel Products (March 2026)	Nessus	Windows : Microsoft Bulletins	Local	high
301764	Security Updates for Office Online Server (March 2026)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2026-26112

high

Tenable Plugins

Coming Soon

high

high

high

high