CVE-2026-97004

Summary

A heap-based buffer overflow in Microsoft Excel allows remote attackers to execute arbitrary code when processing specially crafted Excel files. This vulnerability could enable attackers to gain full control of affected systems.

Exploitability

Exploitation requires user interaction via a malicious Excel file, making it moderately difficult but still highly impactful, with no special privileges needed for successful exploitation.

Blast radius

If exploited, this vulnerability could affect all Microsoft 365 apps, Office 2021, Office 2024, and Office Online Server installations, potentially leading to widespread system compromise across organizations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Security Update KB5040497 immediately to protect against this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.