CVE-2026-97011

Summary

Microsoft Excel uses an uninitialized resource that allows remote code execution when processing malicious files, potentially enabling attackers to run arbitrary code on affected systems.

Exploitability

Exploitation requires a user to open a specially crafted Excel file, making it moderately difficult but achievable through social engineering or phishing campaigns.

Blast radius

If exploited, this vulnerability could allow attackers to execute code on any system running affected versions of Microsoft Office, potentially leading to full system compromise and data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Security Update KB5042379 for Excel 2021 and Excel 2024, or upgrade to Microsoft 365 Apps for Enterprise version 2408 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.