CVE-2026-100210

Summary

A heap-based buffer overflow in Microsoft Office Excel allows remote code execution when a malicious file is opened, potentially enabling attackers to run arbitrary code on affected systems with the privileges of the user who opened the file.

Exploitability

Exploitation requires user interaction via opening a malicious Excel file, making it moderately difficult to achieve without social engineering, but once triggered, provides high privilege execution capabilities.

Blast radius

The vulnerability affects widely deployed Office applications including Excel in Microsoft 365, Office 2021, and Office 2024, potentially impacting thousands of users across enterprise environments when exploited.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Security Update KB5047898 for Excel 2021 and Office 2024, or upgrade to Microsoft 365 Apps for enterprise version 2408 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.