{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Excel ist ein Tabellenkalkulationsprogramm der Microsoft Office Suite und ist sowohl für Microsoft Windows als auch für Mac OS verfügbar.\r\nDie Microsoft Office Suite beinhaltet zahlreiche Büroanwendungen wie Textverarbeitung, Tabellenkalkulation, Datenbank und weitere Applikationen.\r\nMicrosoft 365 Apps ist eine Office Suite für zahlreiche Büroanwendungen.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft Excel 2016, Microsoft Office 2024, Microsoft Office 2021, Microsoft 365 Apps Enterprise und Microsoft Office 2019 ausnutzen, um beliebigen Programmcode auszuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-2625 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2625.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-2625 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2625"
    }, {
      "category" : "external",
      "summary" : "Microsoft Update Guide vom 2026-08-03",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62870"
    } ],
    "source_lang" : "en-US",
    "title" : "Microsoft Excel (2016), Office (2019, 2021 und 2024) und 365 Apps: Schwachstelle ermöglicht Codeausführung",
    "tracking" : {
      "current_release_date" : "2026-08-03T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-08-04T08:31:08.126+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-2625",
      "initial_release_date" : "2026-08-03T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-08-03T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version",
          "name" : "for Enterprise",
          "product" : {
            "name" : "Microsoft 365 Apps for Enterprise",
            "product_id" : "T057487",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:365_apps:for_enterprise"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "365 Apps"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "2016 <16.0.5561.1001",
          "product" : {
            "name" : "Microsoft Excel 2016 <16.0.5561.1001",
            "product_id" : "T057483"
          }
        }, {
          "category" : "product_version",
          "name" : "2016 16.0.5561.1001",
          "product" : {
            "name" : "Microsoft Excel 2016 16.0.5561.1001",
            "product_id" : "T057483-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:excel:2016__16.0.5561.1001"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Excel"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "2019",
          "product" : {
            "name" : "Microsoft Office 2019",
            "product_id" : "T057490",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:office:2019"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Office"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "LTSC",
          "product" : {
            "name" : "Microsoft Office 2021 LTSC",
            "product_id" : "T057489",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:office_2021:ltsc"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Office 2021"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "LTSC",
          "product" : {
            "name" : "Microsoft Office 2024 LTSC",
            "product_id" : "T057488",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:office_2024:ltsc"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Office 2024"
      } ],
      "category" : "vendor",
      "name" : "Microsoft"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-62870",
    "product_status" : {
      "known_affected" : [ "T057490", "T057483", "T057487", "T057488", "T057489" ]
    },
    "release_date" : "2026-08-03T22:00:00.000+00:00",
    "title" : "CVE-2026-62870"
  } ]
}