CVE-2026-68804

Analyzed Analyzed - Analysis Complete

Numeric Truncation Error in Microsoft Office Excel Allows Code Execution

Publication date: 2026-08-11

Last updated on: 2026-08-13

Assigner: Microsoft Corporation

Description

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-13

Generated

2026-08-31

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-68804

EUVD

EUVD-2026-56758

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	365_apps	*
microsoft	365_apps	*
microsoft	excel	2016
microsoft	excel	2016
microsoft	office_2019	*
microsoft	office_2019	*
microsoft	microsoft_365	*
microsoft	office_2021	*
microsoft	office_2021	*
microsoft	office_2021	*
microsoft	office_2024	*
microsoft	office_2024	*
microsoft	office_2024	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-197	Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This vulnerability is a numeric truncation error in Microsoft Office Excel that allows an unauthorized attacker to execute code locally on a victim's system.

Detection Guidance

This vulnerability involves a numeric truncation error in Microsoft Office Excel that could allow code execution. Detection primarily relies on ensuring Excel and related Microsoft Office components are updated to the latest patched versions. No specific commands are provided in the available resources to directly detect this issue.

Impact Analysis

An attacker could exploit this flaw to run malicious code on your computer, potentially stealing data, installing malware, or taking control of your system if you open a specially crafted Excel file.

Compliance Impact

This vulnerability allows remote code execution via a numeric truncation error in Microsoft Office Excel, which could lead to unauthorized access or data breaches. Such breaches may violate GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive information, potentially resulting in non-compliance with these regulations.

Mitigation Strategies

Apply the latest security updates from Microsoft for Office Excel immediately to patch the numeric truncation error that enables remote code execution.

Hi! I’m here to help you understand CVE-2026-68804. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70