{"id":"CVE-2026-102856","published":"2026-10-13T19:17:49.973","lastModified":"2026-10-15T17:27:50.580","description":"Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102856","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Visio allows remote attackers to execute arbitrary code when processing specially crafted Visio files. This vulnerability could enable attackers to gain full control over affected systems.","exploitability":"Exploitation requires user interaction via opening a malicious Visio file, making it moderately difficult but achievable through social engineering or phishing campaigns.","blast_radius":"If exploited, this vulnerability could compromise thousands of Office 365 and desktop Office users who frequently open Visio files, potentially leading to widespread system compromise.","remediation":"Deploy the Microsoft security update KB5042879 immediately to all affected systems running Office 2021 or Office 2024.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","visio","remote"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:52:27.711Z"}}