CVE-2026-97003

Summary

A heap-based buffer overflow in Microsoft Excel allows remote attackers to execute arbitrary code when processing malicious Excel files. This vulnerability could enable attackers to gain full control of affected systems.

Exploitability

Exploitation requires a user to open a specially crafted Excel file, making it moderately difficult but possible to achieve remote code execution through social engineering or phishing attacks.

Blast radius

If exploited, this vulnerability could allow attackers to execute code on any system running affected versions of Microsoft Office, potentially leading to widespread compromise across an organization's network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Security Update KB5042819 for Excel 2021 and Office 2024, or upgrade to Microsoft 365 Apps for enterprise version 2407 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.