CVE-2026-20957CWE-122CWE-191

Microsoft Excel Remote Code Execution Vulnerability

High · published January 13, 2026

CVSS v3.1
7.8
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

⚡ A sneaky integer underflow in Microsoft Excel could let unauthorized attackers run code locally — all it takes is a crafty document! 🔥 Think of this like a faulty vending machine that, with a mere miscalculation, lets you take out a whole pile of snacks without paying. In this case, Excel misjudges the numbers and opens the door for attackers to execute their own code! An attacker could exploit this vulnerability to gain control of the affected system, leading to unauthorized actions such as stealing sensitive data, installing malicious software, or even compromising the entire network. Imagine a hacker strolling into your digital office without permission and doing whatever they please — absolutely devastating!

Put simply

Think of this like a faulty vending machine that, with a mere miscalculation, lets you take out a whole pile of snacks without paying. In this case, Excel misjudges the numbers and opens the door for attackers to execute their own code! This integer underflow vulnerability allows attackers to manipulate how Excel processes numerical operations, resulting in the execution of arbitrary code locally. Essentially, the flaw arises from certain calculations resulting in unexpected low values, causing the application to behave unpredictably.

What to do

An attacker could exploit this vulnerability to gain control of the affected system, leading to unauthorized actions such as stealing sensitive data, installing malicious software, or even compromising the entire network. Imagine a hacker strolling into your digital office without permission and doing whatever they please — absolutely devastating! To safeguard against this threat, patch your Microsoft Office to the latest version immediately. Regularly check for updates and ensure that any security configurations are correctly applied to limit local execution rights. Don't forget to train your users to avoid suspicious documents! You've got this! With a few simple steps, you can lock this vulnerability down and keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-01-13T17:57Z
EPSS history
Timeline
  • 13 JAN 17:57Z
    Microsoft Excel Remote Code Execution Vulnerability
    cvelistv5