{"id":"CVE-2026-97775","published":"2026-10-13T19:22:15.463","lastModified":"2026-10-15T21:19:31.807","description":"Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-400","CWE-416"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024","office online server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97775","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Microsoft Office Excel allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when the application frees memory that's still being referenced, potentially leading to code execution through crafted Excel files.","exploitability":"Exploitation requires a user to open a malicious Excel file, making it moderately difficult but achievable through social engineering or phishing campaigns.","blast_radius":"If exploited, this vulnerability could affect millions of Office users across Windows and Mac platforms, potentially leading to full system compromise and data exfiltration.","remediation":"Deploy Microsoft Security Update KB5043289 for Office 2021 and Office 2024, or upgrade to Microsoft 365 Apps for enterprise version 2407 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","excel","memory-corruption"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:22:30.704Z"}}