CVE-2026-100211: Microsoft Office Excel Remote Code Execution Vulnerability
Microsoft Office Excel Remote Code Execution Vulnerability
Other sources
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.17932.21056 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases
Event History
Frequently Asked Questions
Which environments should be prioritized for triage?
Prioritize systems running Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2024 in either 32-bit or 64-bit editions, Microsoft Office 365 for Mac, Office LTSC for Mac 2024 or 2021, or Microsoft Office Excel.
What does exploitation require from an attacker?
The vulnerability is remotely exploitable over a network with low attack complexity and does not require attacker privileges. User interaction is required for successful exploitation.
How can I determine whether my organization may be affected?
Identify endpoints with any of the listed Microsoft Office or Excel products installed. The supplied information does not include affected version ranges or configuration conditions, so it cannot distinguish vulnerable installations from patched ones.