CVE-2026-97770

Summary

A stack-based buffer overflow in Microsoft Excel allows remote attackers to execute arbitrary code when processing malicious files. This vulnerability is particularly dangerous because it can be triggered over a network without user interaction, making it ideal for remote exploitation.

Exploitability

Exploitation is moderately difficult and requires an attacker to deliver a specially crafted Excel file to a victim, though the attack can be executed remotely with minimal user interaction once the file is opened.

Blast radius

The vulnerability affects all versions of Microsoft 365 apps, Office 2021, Office 2024, and Office Online Server, potentially impacting thousands of users across organizations that use these applications.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 version 2408 or Office 2024 version 2408 update immediately to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.