{"id":"CVE-2026-105596","published":"2026-10-13T19:17:58.567","lastModified":"2026-10-15T15:31:04.250","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105596","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code when processing specially crafted files. This vulnerability is particularly concerning because it affects widely used Office applications and can be exploited over a network without user interaction.","exploitability":"Exploitation is moderately difficult as it requires crafting a malicious file that triggers the buffer overflow, but once triggered, remote code execution is highly likely with no user interaction required.","blast_radius":"The vulnerability could impact thousands of users across organizations since Office Access is commonly used for database applications and can be easily delivered via email attachments or shared network drives.","remediation":"Deploy the Microsoft Office 2021 Security Update KB5045839 or Office 2024 Security Update KB5045840 immediately to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","buffer-overflow","network"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:54:04.885Z"}}