Spreadsheet::XLSX before 0.19 allows code execution via ExcelFmt eval
A crafted Excel number-format condition is passed to Perl string eval inside ExcelFmt.
6 stories, newest first · one card per story
A crafted Excel number-format condition is passed to Perl string eval inside ExcelFmt.

Microsoft fixed Excel copy-and-paste failures caused by September 2026 Office security updates.

Microsoft confirms KB5002914 Excel security update silently breaks copy-paste in Excel 2016-2024, forcing admins to choose between usability and security fixes.

Microsoft confirms KB5002914 Office security update silently breaks copy-paste, autofill, and formula dragging in Excel 2016 through 2024.

Microsoft's September Patch Tuesday update KB5002914 breaks copy-and-paste and formula dragging in Excel 2016 through 2024; uninstalling the update restores functionality.

Microsoft's September 2026 Patch Tuesday fixes 973 vulnerabilities, including two zero-days already exploited in the wild.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views