NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability1 · 1 read

CVE-2026-26113

CVSS 3.1: 7.8 high
EPSS: <1%p44
Published: Mar 10, 2026 · Mar 10, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-26113 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

Vendors: microsoft

Products: 365 apps, office, office long term servicing channel, sharepoint server

Weakness: CWE-822

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

5 stories

2026-004: Critical Vulnerability in SharePoint Exploited

CVE-2026-20963 (CVSS 9.8), an unauthenticated RCE in on-prem SharePoint, was added to CISA's KEV on 18 March 2026 and is actively exploited.

CERT-EU AdvisoriesMar 25, 00:00 UTC · Mar 25, 2026Exploit / PoCExploitedCVE-2026-20963 CVE-2026-26106 CVE-2026-26113+12

90

Microsoft patches 80+ vulnerabilities, six flagged as "more likely" to be exploited

Help Net SecurityMar 19, 10:31 UTC · Mar 19, 2026VulnerabilityExploitedCVE-2026-21262 CVE-2026-26127 CVE-2026-24289+101

60

Microsoft Patch Tuesday, March 2026 Edition

Krebs on SecurityMar 11, 12:51 UTC · Mar 11, 2026VulnerabilityCVE-2026-21262 CVE-2026-26127 CVE-2026-26113+61 · 1 read

60

Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities

Cisco TalosMar 10, 22:23 UTC · Mar 10, 2026VulnerabilityCVE-2026-26110 CVE-2026-26113 CVE-2026-26144+142 · 1 read

60

Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero

CyberScoopMar 10, 19:37 UTC · Mar 10, 2026VulnerabilityExploitedCVE-2026-21262 CVE-2026-26127 CVE-2026-23668+82

60