{"history":[{"alert":0,"cve":"CVE-2026-118711","id":23201,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.01079, \"percentile\": 0.65546}"},{"alert":1,"cve":"CVE-2026-118711","id":21212,"kind":"cna","observed_at":1794478802,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-118711\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T19:34:25.655569Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T19:38:40.611Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Microsoft 365 Apps for Enterprise\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"https://aka.ms/OfficeSecurityReleases\", \"status\": \"affected\", \"version\": \"16.0.1\", \"versionType\": \"custom\"}]}, {\"product\": \"Microsoft Office 365 for Mac\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"16.115.26110837\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Microsoft Office LTSC 2021\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"16.0.14334.21048\", \"status\": \"affected\", \"version\": \"16.0.1\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Microsoft Office LTSC 2024\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"16.0.17932.21140\", \"status\": \"affected\", \"version\": \"16.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Microsoft Office LTSC for Mac 2021\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"16.115.26110837\", \"status\": \"affected\", \"version\": \"16.0.1\", \"versionType\": \"custom\"}]}, {\"product\": \"Microsoft Office LTSC for Mac 2024\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"16.115.26110837\", \"status\": \"affected\", \"version\": \"16.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Office Online Server\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"16.0.10417.20236\", \"status\": \"affected\", \"version\": \"16.0.0.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*\", \"versionEndExcluding\": \"16.115.26110837\", \"versionStartIncluding\": \"16.0.1\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*\", \"versionEndExcluding\": \"16.115.26110837\", \"versionStartIncluding\": \"16.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*\", \"versionEndExcluding\": \"16.115.26110837\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*\", \"versionEndExcluding\": \"16.0.10417.20236\", \"versionStartIncluding\": \"16.0.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*\", \"versionEndExcluding\": \"16.0.14334.21048\", \"versionStartIncluding\": \"16.0.1\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*\", \"versionEndExcluding\": \"16.0.17932.21140\", \"versionStartIncluding\": \"16.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*\", \"versionEndExcluding\": \"https://aka.ms/OfficeSecurityReleases\", \"versionStartIncluding\": \"16.0.1\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-121\", \"description\": \"CWE-121: Stack-based Buffer Overflow\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-11T17:20:32.339Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Microsoft Office Excel Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118711\"}], \"title\": \"Microsoft Office Excel Remote Code Execution Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-118711\", \"datePublished\": \"2026-11-10T18:24:54.798Z\", \"dateReserved\": \"2026-10-28T19:02:36.604Z\", \"dateUpdated\": \"2026-11-11T17:20:32.339Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft 365 Apps for Enterprise","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office 365 for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"1.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2021","vendor":"Microsoft","versions":[{"lessThan":"16.0.14334.21048","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2024","vendor":"Microsoft","versions":[{"lessThan":"16.0.17932.21140","status":"affected","version":"16.0.0","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.0","versionType":"custom"}]},{"product":"Office Online Server","vendor":"Microsoft","versions":[{"lessThan":"16.0.10417.20236","status":"affected","version":"16.0.0.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-118711","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:34:25.655569Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-10T19:38:40.611Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft 365 Apps for Enterprise","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office 365 for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"1.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2021","vendor":"Microsoft","versions":[{"lessThan":"16.0.14334.21048","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2024","vendor":"Microsoft","versions":[{"lessThan":"16.0.17932.21140","status":"affected","version":"16.0.0","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.0","versionType":"custom"}]},{"product":"Office Online Server","vendor":"Microsoft","versions":[{"lessThan":"16.0.10417.20236","status":"affected","version":"16.0.0.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionEndExcluding":"16.115.26110837","versionStartIncluding":"16.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionEndExcluding":"16.115.26110837","versionStartIncluding":"16.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*","versionEndExcluding":"16.115.26110837","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*","versionEndExcluding":"16.0.10417.20236","versionStartIncluding":"16.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionEndExcluding":"16.0.14334.21048","versionStartIncluding":"16.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionEndExcluding":"16.0.17932.21140","versionStartIncluding":"16.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases","versionStartIncluding":"16.0.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2026-11-10T16:00:00.000Z","descriptions":[{"lang":"en-US","value":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network."}],"metrics":[{"cvssV3_1":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","description":"CWE-121: Stack-based Buffer Overflow","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-11T17:20:32.339Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"Microsoft Office Excel Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118711"}],"title":"Microsoft Office Excel Remote Code Execution Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2026-118711","datePublished":"2026-11-10T18:24:54.798Z","dateReserved":"2026-10-28T19:02:36.604Z","dateUpdated":"2026-11-11T17:20:32.339Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794478802,"cve":"CVE-2026-118711","description":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","epss":{"date":"2026-11-12","epss":0.01079,"percentile":0.65546},"epss_checked":1794522003,"first_seen":1794467710,"kev":null,"kev_checked":1794522003,"products":"Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118711"],"score":{"baseScore":8.8,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Microsoft Office Excel Remote Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026/","id":418,"publisher":"Cisco Talos","title":"Microsoft Patch Tuesday for November 2026 \u2014 Snort rules and prominent vulnerabilities"}]}