CVE-2026-97004
CVE-2026-97004 · Microsoft Office Excel Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVSS 8.8 · High · EPSS 0.7% · Fix available
- Published
- Updated
Affected products and versions
microsoft 365 apps for enterprise
- Versions
- ≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases: Affected (custom)
No fix published
microsoft office 365 for mac
- Versions
- ≥ 1.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc 2021
- Versions
- ≥ 16.0.1, < 16.0.14334.20974: Affected (custom)
Update to 16.0.14334.20974
microsoft office ltsc 2024
- Versions
- ≥ 16.0.0, < 16.0.17932.21056: Affected (custom)
Update to 16.0.17932.21056
microsoft office ltsc for mac 2021
- Versions
- ≥ 16.0.1, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc for mac 2024
- Versions
- ≥ 16.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
office online server
- Versions
- ≥ 16.0.0.0, < 16.0.10417.20228: Affected (custom)
Update to 16.0.10417.20228