Is Microsoft 365 Apps For Enterprise affected by CVE-2026-32188?

Microsoft Excel contains an out-of-bounds read vulnerability (CVE-2026-32188) affecting Office 2016/2019, Office LTSC 2021/2024, and Microsoft 365 Apps that allows attackers to extract sensitive memory contents and disrupt operations when users open crafted spreadsheet files.

CVE-2026-32188

EUVD-2026-22567 HIGH

2026-04-14 microsoft

Buffer Overflow Information Disclosure Microsoft Microsoft 365 Apps For Enterprise Microsoft Excel 2016 Microsoft Office 2019 Microsoft Office Ltsc 2021 Microsoft Office Ltsc 2024 Microsoft Office Ltsc For Mac 2021 Microsoft Office Ltsc For Mac 2024 Office Online Server

7.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 14, 2026 - 19:22 vuln.today

DescriptionNVD

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

AnalysisAI

Out-of-bounds read vulnerability (CWE-125) in Microsoft Excel allows local attackers to disclose sensitive memory contents and cause denial of service through maliciously crafted spreadsheet files with user interaction. Affects Microsoft Office 2016/2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Office Online Server across Windows and macOS platforms. …

RemediationAI

Within 24 hours: Inventory all Excel versions in use (Office 2016/2019, Office LTSC 2021/2024, Microsoft 365 Apps) and identify affected systems across Windows and macOS endpoints. Within 7 days: Deploy vendor-released patches from Microsoft Security Response Center to all affected Office installations; prioritize finance, legal, and executive workstations first. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-32188 vulnerability details – vuln.today

Back