CVE WatchSep 8, 2026

CVE-2026-81401

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose informat

CVSS

5.5

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Sep 8, 2026 · Last modified: Sep 8, 2026 · CWE-843

EPSS · 30d

Not enough EPSS history yet.

Technical description

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81401

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-778907.5 HIG

—

———Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.6h CVE-2026-778897.5 HIG

—

———Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.6h CVE-2026-778887.5 HIG

—

———Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.6h CVE-2026-774997.5 HIG

—

———Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.6h CVE-2026-774947.5 HIG

—

———Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.6h CVE-2026-729386.5 MED

—

———Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.6h