CVE-2026-124229
Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.
CVSS
6.6
Medio
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-502
Sin historial EPSS suficiente todavía.
Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1233908.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1200007.5 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1141518.8 ALT—
——0Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.3hCVE-2026-1100448.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1094728.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4hCVE-2026-1094648.8 ALT—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.4h