{"id":"CVE-2026-97772","published":"2026-10-13T19:22:15.107","lastModified":"2026-10-15T21:19:31.490","description":"Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-415"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024","office online server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97772","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Microsoft Excel suffers from a double free vulnerability that allows remote code execution when processing malicious files. This occurs due to improper memory management where the same memory block is freed twice, potentially leading to arbitrary code execution.","exploitability":"Exploitation requires a user to open a specially crafted Excel file, making it moderately difficult but possible with social engineering, and relies on the target having Microsoft Office installed.","blast_radius":"If exploited, this vulnerability could affect all users running supported versions of Microsoft Office including Office 2021, Office 2024, and Office Online Server, potentially leading to widespread remote code execution across an organization.","remediation":"Deploy the Microsoft Security Update KB5042869 immediately to fix this vulnerability in all affected Office versions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","excel","memory-corruption"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:22:20.214Z"}}