CVE-2026-100211

Summary

A use-after-free vulnerability in Microsoft Excel allows remote attackers to execute arbitrary code when a malicious file is opened. This occurs when Excel improperly handles memory after an object has been freed, creating a potential remote code execution vector.

Exploitability

Exploitation requires a user to open a specially crafted Excel file, making it moderately difficult but possible to achieve remote code execution with social engineering.

Blast radius

The vulnerability affects Microsoft 365 apps and Office 2021/2024, meaning a wide range of users could be impacted, potentially leading to widespread remote code execution across enterprise networks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 or Office 2024 update that includes the fix for CVE-2026-100211, specifically version 2403 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.