Microsoft Updates Excel RCE Advisory CVE-2026-97777 With Informational Acknowledgement Change

What happened

Microsoft published an informational update to the advisory for CVE-2026-97777, a remote code execution vulnerability in Microsoft Office Excel. The update changed an acknowledgement only and did not introduce new technical details, exploit status, or remediation guidance.

Impact

Organizations using Microsoft Office Excel should continue to treat CVE-2026-97777 as a potential remote code execution risk if the affected component is unpatched. In a typical Office RCE scenario, an attacker could attempt to execute code by getting a user or automated process to open a malicious Excel file. This update does not change the underlying risk, but it does not provide new evidence of active exploitation or new affected versions.

What to do

• Verify that Excel and the broader Microsoft Office installation are current with the latest security updates.
• Apply pending Office patches through your normal patch-management process, prioritizing internet-facing and high-risk users.
• Keep macro execution restricted to trusted locations and avoid enabling macros for untrusted files.
• Review Office-related application allowlisting and monitoring for suspicious child processes, PowerShell, or network activity spawned by Excel.
• Track the advisory for future technical updates, especially if Microsoft adds affected versions, exploit status, or mitigation details.

Editor note

This is an informational advisory change. Defenders should not treat it as a new vulnerability disclosure, but they should confirm that existing Excel RCE mitigations and patching are in place.