{"id":"CVE-2026-105716","published":"2026-10-13T19:17:59.493","lastModified":"2026-10-15T15:25:15.800","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105716","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code when processing specially crafted files. This vulnerability is particularly concerning because it affects widely used Office applications and can be exploited over a network without user interaction.","exploitability":"Exploitation is moderately difficult as it requires an attacker to convince a user to open a malicious Access file, but the attack can be delivered via email attachments or web downloads with minimal user interaction required.","blast_radius":"The impact could be significant across organizations using Office 2021 or Office 2024, especially those that frequently process Access database files from external sources or receive them via email.","remediation":"Deploy the Microsoft Office 2024 update KB5039876 or Office 2021 update KB5039877 immediately to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","access","remote"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:54:24.012Z"}}