CVE-2026-97761

Summary

A stack-based buffer overflow in Microsoft Excel allows remote attackers to execute arbitrary code when processing maliciously crafted Excel files. This vulnerability is particularly dangerous because it can be triggered over a network without user interaction, making it ideal for drive-by attacks.

Exploitability

Exploitation is moderately difficult and requires the attacker to convince a user to open a specially crafted Excel file, though the attack can be delivered via email attachments or web downloads with minimal user interaction required.

Blast radius

The vulnerability affects Microsoft 365 apps, Office 2021, and Office 2024, making it highly impactful across enterprise environments where these applications are commonly used for document processing and collaboration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Excel update KB5040000 which fixes this vulnerability in Excel versions 2308 and later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.