{"id":"CVE-2026-108439","published":"2026-10-15T21:17:09.377","lastModified":"2026-10-17T04:16:49.643","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108439","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office Word allows remote attackers to execute arbitrary code when processing malicious documents over a network. This vulnerability is particularly dangerous because it can be triggered remotely without user interaction, making it ideal for drive-by attacks.","exploitability":"Exploitation is moderately difficult requiring a crafted Word document delivered over a network, with no user interaction needed once the document is opened, and typically requires a specific memory layout to achieve reliable code execution.","blast_radius":"The impact could be severe across organizations using Microsoft Office Word, as attackers could gain full system access on vulnerable machines when users open malicious documents, potentially leading to widespread compromise of corporate networks.","remediation":"Deploy the Microsoft Office 2019, Office 2021, or Office 2024 updates released in the January 2026 security update bulletin (KB5053789) to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","network","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T15:57:45.867Z"}}