Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 5 products
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Patch1 |
| 2026-04-17 | 1 | Disclosure1 |
CVE-2026-32189 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. https://www.cve.org/CVERecord?id=CVE-2026-32189
Post summary
CVE-2026-32189 is a use‑after‑free vulnerability in Microsoft Office Excel that enables local code execution. The post provides only the CVE identifier and a brief description, without any PoC, exploit, or patch details.
CVE-2026-32189 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office Excel allows unauth attacker to achieve RCE locally by tricking user into opening malicious Excel file. Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Microsoft 365 Apps for Enterprise Affected Version: >= 16.0.1 and < https://aka.ms/OfficeSecurityReleases Sources Vendor: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32189
Post summary
Microsoft has released a patch for CVE‑2026‑32189, a use‑after‑free RCE vulnerability in Excel, with severity and affected version details. No public PoC or active exploitation is reported yet.
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | excel | 2016 | - | x64 |
| App | microsoft | excel | 2016 | - | x86 |
| App | microsoft | office | 2019 | - | x64 |
| App | microsoft | office | 2019 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | macos | - |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2024 | macos | - |
| App | microsoft | office_online_server | - | - | - |