{"id":"CVE-2026-97776","published":"2026-10-13T19:22:15.590","lastModified":"2026-10-15T21:19:31.927","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024","office online server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97776","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Excel allows remote attackers to execute arbitrary code when processing maliciously crafted Excel files. This vulnerability could enable attackers to gain full control of affected systems.","exploitability":"Exploitation requires a user to open a specially crafted Excel file, making it moderately difficult to achieve but still highly impactful once successful.","blast_radius":"If exploited, this vulnerability could affect millions of users running Microsoft 365 apps, Office 2021, and Office 2024 across enterprise networks.","remediation":"Deploy the Microsoft Security Update KB5040329 for Excel 2021, Excel 2024, and Office Online Server immediately.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","excel","remote-exploitation","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:22:35.630Z"}}