CVE Catalog
CVE-2026-70318
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.37%
30th percentile - higher than 30% of all known CVEs
Summary
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Risk Assessment
The risk is that an unauthorized user may gain local access to sensitive data, potentially leading to information disclosure.
Recommendation
It is recommended to update Microsoft Office Excel to the latest version and implement access restrictions to files.
Original NVD description (English source)
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.