CVE-2026-97776
8.8 HIGHPublished 2026-10-13 · Updated 2026-10-15
AI risk analysis
- Summary
- A heap-based buffer overflow in Microsoft Excel allows remote attackers to execute arbitrary code when processing maliciously crafted Excel files. This vulnerability could enable attackers to gain full control of affected systems.
- Exploitability
- Exploitation requires a user to open a specially crafted Excel file, making it moderately difficult to achieve but still highly impactful once successful.
- Blast radius
- If exploited, this vulnerability could affect millions of users running Microsoft 365 apps, Office 2021, and Office 2024 across enterprise networks.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Deploy the Microsoft Security Update KB5040329 for Excel 2021, Excel 2024, and Office Online Server immediately.
rceexcelremote-exploitationbuffer-overflow
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-122
Vendors
microsoft
Products
365 apps, microsoft 365, office 2021, office 2024, office online server
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-77902
- HIGHCVE-2026-97756
- HIGHCVE-2026-97768
- HIGHCVE-2026-102850
- HIGHCVE-2026-88197
- HIGHCVE-2026-97748
- HIGHCVE-2026-97753
- HIGHCVE-2026-97758
Related by shared AI tags and CWE weakness class. Browse the full archive.