{"id":"CVE-2026-97753","published":"2026-10-13T19:22:12.850","lastModified":"2026-10-15T21:19:29.277","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024","office online server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97753","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Excel allows remote attackers to execute arbitrary code when processing specially crafted Excel files. This vulnerability is particularly dangerous because it can be triggered over a network without user interaction, making it ideal for drive-by attacks.","exploitability":"Exploitation is moderately difficult as it requires crafting a malicious Excel file that triggers the buffer overflow, but once triggered, it provides high privileges execution with no user interaction required.","blast_radius":"The vulnerability affects all major Microsoft 365 Office applications including Excel, Word, and PowerPoint, potentially impacting thousands of endpoints across an organization when users open malicious files from email or web downloads.","remediation":"Deploy the Microsoft Security Update KB5042819 immediately to fix this vulnerability in Excel and other affected Office applications.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","excel","remote-exploitation","office"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:20:47.853Z"}}