PULSEUnderground Intel

LIVE18signals / 24h

FEED

ransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Found

CVE WatchOct 14, 2026

CVE-2026-97772

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS

8.8

High

EPSS

0.7%

p53

KEV

—

Exploit Today

16

0-100

Published: Oct 13, 2026 · Last modified: Oct 14, 2026 · CWE-415

EPSS · 30d

Not enough EPSS history yet.

Technical description

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97772

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1105997.1 HIG

——0L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to lsmash_read_file() or the boxdumper, remuxer, or muxer tools, causing use-after-free, heap corruption, and crashes.22h CVE-2026-94370—

——7A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ownership of it. Two objects then release the same memory, producing a double free, an invalid free, or a use-after-free.23h CVE-2026-956357.8 HIG

——4Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.23h CVE-2026-978307.5 HIG

——18Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.18h CVE-2026-978127.0 HIG

——5Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.2d CVE-2026-978117.8 HIG

——4Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.2d