CVE-2026-97739

Summary

A vulnerability in Microsoft Office Excel allows attackers to execute arbitrary code remotely through integer underflow conditions, potentially leading to full system compromise.

Exploitability

Exploitation requires a user to open a malicious Excel file over a network, making it moderately difficult but achievable with social engineering or compromised email attachments.

Blast radius

If exploited, this vulnerability could affect thousands of users across Microsoft 365 and Office applications, potentially leading to widespread data breaches and system compromises.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 update KB5040000 or Office 2024 update KB5040001 immediately to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.