CVE-2026-97008
CVE-2026-97008 · Microsoft Office Excel Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVSS 8.8 · High · EPSS 0.7% · Fix available
- Published
- Updated
Affected products and versions
microsoft 365 apps for enterprise
- Versions
- ≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases: Affected (custom)
No fix published
microsoft office 365 for mac
- Versions
- ≥ 1.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc 2021
- Versions
- ≥ 16.0.1, < 16.0.14334.20974: Affected (custom)
Update to 16.0.14334.20974
microsoft office ltsc 2024
- Versions
- ≥ 16.0.0, < 16.0.17932.21056: Affected (custom)
Update to 16.0.17932.21056
microsoft office ltsc for mac 2021
- Versions
- ≥ 16.0.1, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc for mac 2024
- Versions
- ≥ 16.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
office online server
- Versions
- ≥ 16.0.0.0, < 16.0.10417.20228: Affected (custom)
Update to 16.0.10417.20228