CVE-2026-97007

Summary

A heap-based buffer overflow in Microsoft Office Excel allows remote attackers to execute arbitrary code when processing maliciously crafted Excel files. This vulnerability could enable attackers to gain full control of affected systems.

Exploitability

Exploitation requires user interaction via opening a malicious Excel file over the network, making it moderately difficult to achieve but still quite possible in targeted campaigns.

Blast radius

If exploited, this vulnerability could allow attackers to execute code on any system running affected versions of Microsoft 365 apps, Office 2021, or Office 2024, potentially leading to widespread compromise across an organization.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Security Update KB5042798 for Excel 2021 and Office 2024, or upgrade to Microsoft 365 Apps version 2408 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.