{"id":"CVE-2026-102855","published":"2026-10-13T20:17:07.010","lastModified":"2026-10-15T20:39:54.150","description":"Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102855","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Visio allows remote attackers to execute arbitrary code when processing malicious Visio files. This vulnerability is particularly dangerous because it can be triggered over a network without user interaction, making it ideal for remote exploitation.","exploitability":"Exploitation is moderately difficult and requires an attacker to convince a user to open a specially crafted Visio file, though the attack can be delivered via network share or email attachment with minimal user interaction required.","blast_radius":"The impact could be significant as Visio is commonly used in business environments for diagramming and technical documentation, potentially allowing attackers to gain full system access on vulnerable machines.","remediation":"Deploy Microsoft Security Update KB5042798 immediately, which addresses this vulnerability in Visio 2016, Visio 2019, and Visio 2021.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:23:08.690Z"}}