{"id":"CVE-2026-105593","published":"2026-10-13T19:17:58.307","lastModified":"2026-10-15T16:01:06.903","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105593","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code on affected systems. This vulnerability is particularly concerning because it affects widely used Office applications and can be exploited over a network without requiring user interaction.","exploitability":"Exploitation appears moderately difficult as it requires a remote attacker to craft a malicious file that triggers the buffer overflow, but the attack surface is large due to the prevalence of Access files in enterprise environments.","blast_radius":"The impact could be significant across organizations using Office 2021 or Office 2024, especially those with shared network drives or email systems where Access files might be opened automatically.","remediation":"Deploy the Microsoft Office 2024 update KB5039678 or Microsoft Office 2021 update KB5039679 immediately to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","buffer-overflow","network"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:53:52.733Z"}}