On March 10, 2026, Microsoft patched CVE-2026-26144, a cross-site scripting (XSS) vulnerability in Excel. XSS in Office isn't ...
The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java ...