{"id":"CVE-2026-97762","published":"2026-10-13T19:22:13.990","lastModified":"2026-10-15T21:19:30.350","description":"Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024","office online server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97762","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An out-of-bounds write vulnerability in Microsoft Excel allows remote attackers to execute arbitrary code on affected systems when processing malicious Excel files. This flaw enables attackers to gain full system control without requiring user interaction once the malicious file is opened.","exploitability":"Exploitation requires a remote attacker to deliver a specially crafted Excel file that triggers the out-of-bounds write, with no user interaction needed once the file is opened.","blast_radius":"The vulnerability affects all Microsoft 365 apps and Office versions including 2021 and 2024, making it highly impactful across enterprise environments where Excel is commonly used for document sharing.","remediation":"Deploy the Microsoft Office 2021 Security Update KB5045879 or Microsoft Office 2024 Security Update KB5045880 immediately to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","excel","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:21:31.350Z"}}