CVE-2026-105718

Summary

A Microsoft Excel out-of-bounds read vulnerability allows remote code execution when processing malicious files, potentially enabling attackers to run arbitrary code on affected systems.

Exploitability

Exploitation requires a user to open a specially crafted Excel file, making it moderately difficult but achievable through social engineering or phishing attacks.

Blast radius

The vulnerability affects all Microsoft 365 apps and Office versions including 2021 and 2024, potentially impacting thousands of users across an organization.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2024 update KB5040000 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.