{"id":"CVE-2026-97751","published":"2026-10-13T19:22:12.587","lastModified":"2026-10-15T21:19:29.040","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024","office online server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97751","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Excel allows remote attackers to execute arbitrary code when processing malicious Excel files. This vulnerability is particularly dangerous because it can be triggered over a network without user interaction, making it ideal for remote exploitation.","exploitability":"Exploitation is moderately difficult and requires an attacker to deliver a specially crafted Excel file to a victim, but the attack can be fully automated with no user interaction once the file is opened, making it highly suitable for phishing campaigns or drive-by downloads.","blast_radius":"The vulnerability affects all Microsoft 365 apps, Office 2021, Office 2024, and Office Online Server, potentially impacting thousands of users across an organization with minimal security controls, especially in environments where Excel files are frequently shared or opened from untrusted sources.","remediation":"Deploy the Microsoft Security Update KB5043798 for Office 2021, Office 2024, and Office Online Server to address this heap-based buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","excel","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:20:37.490Z"}}