CVE-2026-97011
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: secure@microsoft.com (Secondary)
Description
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected (9)
Products: Microsoft: 365 Apps, Microsoft 365, Office 2021, Office 2024
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions | |
| All versions | |
| All versions |
Related CWEs
CWE-763
Release of Invalid Pointer or Reference
The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
CWE-908
Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
References (1)
Source: secure@microsoft.com
Vendor Advisory
Timeline
No history available yet.