CVE-2026-100212

Summary

A use-after-free vulnerability in Microsoft Office Excel allows remote attackers to execute arbitrary code when a malicious file is opened, potentially leading to full system compromise.

Exploitability

Exploitation requires social engineering to get a user to open a crafted Excel file, with no additional preconditions needed for successful exploitation.

Blast radius

The vulnerability affects widely deployed Office applications including Excel in Microsoft 365, Office 2021, and Office 2024, making it highly impactful across enterprise environments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 version 2408 or later, or Microsoft Office 2024 version 2408 or later, to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.