CVE-2026-97014
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Published Oct 13, 2026 · updated Oct 14, 2026 · Microsoft Microsoft 365 Apps for Enterprise
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Oct 14, 2026 · NIST NVD
Updated
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected
- cpe microsoft/365 appsversion unspecified
- cpe microsoft/office 2021version unspecified
- cpe microsoft/office 2024version unspecified
- vendor Microsoft Microsoft 365 Apps for Enterpriseversion unspecified
- vendor Microsoft Microsoft Office LTSC 2021version unspecified
- vendor Microsoft Microsoft Office LTSC 2024version unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-97014
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-97014
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-97014
30-day exploitation probability 0.5%
first.org - NIST NVDVulnerability recordCVE-2026-97014
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd.nist.gov