{"id":"CVE-2026-105598","published":"2026-10-13T19:17:58.830","lastModified":"2026-10-15T15:26:53.243","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105598","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code on vulnerable systems. This vulnerability is particularly concerning because it affects widely used Office applications and can be exploited over a network without user interaction.","exploitability":"Exploitation appears moderately difficult as it requires crafting a malicious file that triggers the buffer overflow during processing, but the attack surface is broad since Access files can be shared via email or network shares.","blast_radius":"If exploited, this vulnerability could lead to widespread compromise of systems running affected Office versions, potentially allowing attackers to execute code with the privileges of the user who opens the malicious file.","remediation":"Deploy the Microsoft Office 2021 and Office 2024 updates that contain the fix for CVE-2026-105598, specifically the 2024 update released in March 2026 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","buffer-overflow","network"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:54:18.035Z"}}