← Lark216 Home

Microsoft Update Intelligence

Administrator notices from Microsoft, summarised: what changed, and what you should do.

1Action Required 455Review Recommended
Microsoft Services 1
Product families
Microsoft 365
Clear
Advanced Filters
Review Recommended

CVE-2026-97767: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel allows remote code execution if exploited.

What you should do

Update Office to the latest version to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97765: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97761: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97759: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Update Office to the latest version to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97758: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97756: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Update to the latest version of Microsoft Office. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97755: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel allows remote code execution, which could be exploited by attackers.

What you should do

Apply the security update to all affected Office installations. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97753: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the latest cumulative update for Microsoft Office to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97749: Microsoft Office Outlook Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Outlook could allow remote code execution if exploited.

What you should do

Update Microsoft Office to the latest version to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97745: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel allows remote code execution, which could be exploited over a network.

What you should do

Update Microsoft Office to the latest version. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97742: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97741: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97739: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel allows remote code execution. This affects users of Microsoft Office.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97016: Microsoft Office Outlook Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Outlook could allow remote code execution; IT administrators must address this to prevent attacks.

What you should do

Apply the recommended update as soon as possible to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88207: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 7.5
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88185: Microsoft Office Word Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Word allows remote code execution via a heap-based buffer overflow.

What you should do

Apply the security update immediately to protect systems from remote code execution attacks. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.1
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Word, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88178: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update all affected Office installations to the latest patch as soon as possible to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88156: Microsoft Office Outlook Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Outlook could allow remote code execution if exploited.

What you should do

Update Microsoft Office Outlook to the latest version. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88144: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update all affected Office installations to the latest patch as soon as possible to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70300: Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Office Word has a critical vulnerability that could allow remote code execution. This affects users of Microsoft Office.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Word, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70291: Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Office Outlook is vulnerable to a heap-based buffer overflow that could allow remote code execution by an unauthorized attacker.

What you should do

Apply the recommended update for Microsoft Office Outlook immediately to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70269: Microsoft Office Word Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Word allows remote code execution via a heap-based buffer overflow.

What you should do

Apply the latest Office update immediately to protect against the remote code execution vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.1
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Word, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70242: Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Office Outlook is vulnerable to a heap-based buffer overflow that could allow remote code execution by an unauthorized attacker.

What you should do

Apply the recommended update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70215: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update all affected Office installations to the latest patch immediately to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-105718: Microsoft Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Excel allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update Microsoft Excel to the latest version to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original