{"id":"CVE-2026-102850","published":"2026-10-13T19:17:49.287","lastModified":"2026-10-15T16:04:17.163","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102850","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code when processing specially crafted files. This vulnerability is particularly concerning because it affects widely used Office applications and can be exploited over a network without user interaction.","exploitability":"Exploitation is moderately difficult requiring a crafted malicious file delivered via network share or email attachment, with no user interaction needed once the file is opened.","blast_radius":"The vulnerability could impact thousands of users across organizations since Office Access is commonly used and the exploit can be delivered through typical attack vectors like email attachments or shared network drives.","remediation":"Deploy Microsoft Security Update KB5041234 immediately to all affected systems running Office 2021 or Office 2024.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","remote-exploitation","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:52:22.528Z"}}