CVE-2026-97742: Microsoft Office Excel Remote Code Execution Vulnerability
Published Oct 13, 2026
·Updated
Microsoft Office Excel Remote Code Execution Vulnerability
Other sources
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
— Microsoft
Affected Software
1 affected component
Microsoft Microsoft Office Excel
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
DescriptionSeverity
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attack vector is network-based, requires no privileges, and has low attack complexity. User interaction is required, so exploitation depends on a user interacting with attacker-supplied content or a remote attack delivered to the user.
2
What is the potential impact if exploitation succeeds?
Successful exploitation can allow an unauthorized attacker to execute code. The CVSS vector indicates high impact to confidentiality, integrity, and availability.
3
Is there evidence that this vulnerability is being exploited in the wild?
The supplied exploit-code maturity value is E:U, meaning exploitation status is unknown from the available data.