CVE-2026-97750: CWE-121: Stack-based Buffer Overflow in Microsoft Microsoft 365 Apps for Enterprise

This vulnerability (CVE-2026-97750) is a stack-based buffer overflow in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It enables remote code execution by an unauthorized attacker over a network. The CVSS 3.1 score is 8.8 (high), indicating critical confidentiality, integrity, and availability impacts. Multiple affected versions are explicitly identified, ranging from version 1.0.0 and various 16.0.x builds prior to specific fixed builds. Microsoft has published an official fix and manages remediation for this cloud service. No active exploitation has been reported.

Successful exploitation could allow an attacker to execute arbitrary code remotely, potentially leading to full compromise of the affected system. The vulnerability impacts confidentiality, integrity, and availability with high severity. However, there are no known exploits in the wild currently.

An official fix is available from Microsoft. Users and administrators should apply the provided patches as soon as possible. Since this is a cloud-hosted service, Microsoft manages remediation server-side. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97750 for detailed patching instructions and confirmation of remediation status.