CVE-2026-97743: Microsoft Office Excel Information Disclosure Vulnerability
Microsoft Office Excel Information Disclosure Vulnerability
Other sources
Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases
Event History
Frequently Asked Questions
What does an attacker need to exploit this vulnerability?
The attacker does not need prior privileges, but exploitation requires user interaction. The vulnerability can be exploited over a network and affects confidentiality; integrity and availability impacts are not indicated.
What is the likely impact if exploitation succeeds?
Successful exploitation allows unauthorized disclosure of information from Microsoft Office Excel. The supplied severity vector rates confidentiality impact as high, with no indicated impact on integrity or availability.