CVE-2026-97762

Summary

An out-of-bounds write vulnerability in Microsoft Excel allows remote attackers to execute arbitrary code on affected systems when processing malicious Excel files. This flaw enables attackers to gain full system control without requiring user interaction once the malicious file is opened.

Exploitability

Exploitation requires a remote attacker to deliver a specially crafted Excel file that triggers the out-of-bounds write, with no user interaction needed once the file is opened.

Blast radius

The vulnerability affects all Microsoft 365 apps and Office versions including 2021 and 2024, making it highly impactful across enterprise environments where Excel is commonly used for document sharing.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 Security Update KB5045879 or Microsoft Office 2024 Security Update KB5045880 immediately to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.