CVE-2026-97755

Summary

A memory safety flaw in Microsoft Excel allows attackers to read beyond allocated memory boundaries, potentially leading to arbitrary code execution when opening malicious files over a network.

Exploitability

Exploitation requires a user to open a specially crafted Excel file from a remote location, making it moderately difficult but possible with social engineering or compromised web applications.

Blast radius

The vulnerability affects all major Microsoft Office versions including Office 2021, Office 2024, and SharePoint Server, potentially impacting thousands of users across enterprise networks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Excel update KB5043487 or later to fix the out-of-bounds read vulnerability in Excel.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.