{"id":"CVE-2026-105591","published":"2026-10-13T19:17:58.040","lastModified":"2026-10-15T16:03:07.363","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105591","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code when processing specially crafted files. This vulnerability could enable attackers to gain full control of affected systems.","exploitability":"Exploitation requires a user to open a malicious file, making it moderately difficult but achievable through social engineering or phishing campaigns.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on user workstations running Office Access, potentially leading to full system compromise and data exfiltration across the enterprise.","remediation":"Deploy the Microsoft Office 2021 Security Update KB5043893 or Office 2024 Security Update KB5043894 immediately to all affected systems.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","exploit","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:53:46.399Z"}}