CVE-2026-97746

Summary

A Microsoft Excel integer underflow vulnerability allows remote attackers to execute arbitrary code when processing specially crafted Excel files. This flaw can be triggered over a network without user interaction, making it particularly dangerous for enterprise environments.

Exploitability

Exploitation is moderately difficult as it requires crafting a malicious Excel file with specific integer underflow conditions, but the attack can be delivered remotely without user interaction once the file is accessed.

Blast radius

The vulnerability affects all Microsoft 365 apps and Office versions including 2021 and 2024, potentially impacting thousands of endpoints across an organization when users open malicious Excel files.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy Microsoft Security Update KB5047890 or later to all affected Office installations.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.