CVE-2026-97767

Summary

A double free vulnerability in Microsoft Office Excel allows attackers to execute arbitrary code remotely by exploiting memory corruption issues. This affects multiple Microsoft 365 applications and Office versions.

Exploitability

Exploitation requires a user to open a malicious Excel file over the network, making it moderately difficult but possible with social engineering or compromised email attachments.

Blast radius

If exploited, this vulnerability could allow attackers to execute code on affected systems with high privileges, potentially leading to full system compromise across enterprise environments using Microsoft Office.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Security Update KB5040329 for Office 2021 and Office 2024, or upgrade to Microsoft 365 Apps for Enterprise version 2408 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.