CVE-2026-45649: Microsoft Excel

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.

Affected products

  • Microsoft Excel: affected versions not specified
  • Microsoft PowerPoint: affected versions not specified
  • Microsoft Word: affected versions not specified

Published 2026-06-09. Last modified 2026-07-23.