Kaspersky Threats

Kaspersky ID:

KLA90925

Detect Date:

03/10/2026

Updated:

03/11/2026

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
An information disclosure vulnerability in Windows Graphics Component can be exploited remotely to obtain sensitive information.
An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
An elevation of privilege vulnerability in Microsoft Office can be exploited remotely to gain privileges.
A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.

Original advisories

Exploitation

CVE list

CVE-2026-24285
high
CVE-2026-25180
high
CVE-2026-26105
critical
CVE-2026-26106
critical
CVE-2026-26107
critical
CVE-2026-26108
critical
CVE-2026-26109
critical
CVE-2026-26110
critical
CVE-2026-26112
critical
CVE-2026-26113
critical
CVE-2026-26114
critical
CVE-2026-26134
critical
CVE-2026-26144
critical

KB list

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!

Kaspersky ID:

KLA90925

Detect Date:

03/10/2026

Updated:

03/11/2026

Severity

critical

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update component usually can be accessed from the Control Panel) and updates from the Update Options section, that are listed in your Office Account (Office Account tab usually can be accessed from the File menu)
Install Office updates

Impacts

ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected products

Microsoft Office LTSC 2024 for 32-bit editions
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2016 (32-bit edition)
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC for Mac 2024
Microsoft Office 2019 for 32-bit editions
Microsoft SharePoint Server 2019
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft SharePoint Enterprise Server 2016
Office Online Server
Microsoft Excel 2016 (64-bit edition)
Microsoft SharePoint Server Subscription Edition
Microsoft Office LTSC for Mac 2021
Microsoft Excel 2016 (32-bit edition)
Microsoft Office for Android
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office 2016 (64-bit edition)

Multiple vulnerabilities in Microsoft Office

Description

Original advisories

Exploitation

Related products

CVE list

KB list

Read more