2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft 365 Apps for Enterprise","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office 365 for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"1.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2021","vendor":"Microsoft","versions":[{"lessThan":"16.0.14334.21048","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2024","vendor":"Microsoft","versions":[{"lessThan":"16.0.17932.21140","status":"affected","version":"16.0.0","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.0","versionType":"custom"}]},{"product":"Office Online Server","vendor":"Microsoft","versions":[{"lessThan":"16.0.10417.20236","status":"affected","version":"16.0.0.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*","matchCriteriaId":"3259EBFE-AE2D-48B8-BE9A-E22BBDB31378","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*","matchCriteriaId":"CD25F492-9272-4836-832C-8439EBE64CCF","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:microsoft_365:-:*:*:*:*:macos:*:*","matchCriteriaId":"12418BDE-FA2E-4BBF-8E47-45C505399898","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x64:*","matchCriteriaId":"1D518075-3362-4D15-93B1-0E6C61518D16","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x86:*","matchCriteriaId":"1059BEC6-C30B-4F0F-A878-5267A21CBD85","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:macos:-:*","matchCriteriaId":"0DB3EBBF-E0C4-4D5A-8D22-107463AD1DE4","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:*","matchCriteriaId":"55A9AFDA-D77B-4CC7-ACE5-3A2ABDA257D8","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x86:*","matchCriteriaId":"8887D177-26A3-4008-89B6-50A9E9830F13","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:macos:-:*","matchCriteriaId":"589B470B-9C2E-41E2-A44D-D8CCB4D2F933","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*","matchCriteriaId":"4DD2ABC1-2A1C-4177-B13B-509F329E4228","versionEndExcluding":"16.0.10417.20236","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network."}],"id":"CVE-2026-118295","lastModified":"2026-11-13T17:45:50.153","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118295","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:38:08.819720Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:42.883","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118295"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"},{"lang":"en","value":"CWE-190"}],"source":"secure@microsoft.com","type":"Secondary"}]}
|