{"id":"CVE-2026-108444","published":"2026-10-15T21:17:09.957","lastModified":"2026-10-17T04:16:50.297","description":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108444","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office allows remote attackers to execute arbitrary code on vulnerable systems by tricking users into opening a specially crafted Office document over a network. This vulnerability could lead to full system compromise with high impact.","exploitability":"Exploitation requires a user to open a malicious Office document, making it moderately difficult but achievable through social engineering or phishing campaigns, with no privileged access required.","blast_radius":"The vulnerability affects all users who can open Office documents over a network, potentially impacting thousands of endpoints across an organization when exploited.","remediation":"Deploy Microsoft Office updates immediately, specifically the patch released in the July 2026 security update bulletin (KB5061234) which addresses this heap buffer overflow vulnerability.","detection":"Monitor for unusual network file access patterns to Office documents from external sources, particularly when users open files from shared drives or email attachments. Look for process creation events from Microsoft Office applications with suspicious command-line arguments or memory access violations in Windows Event Logs.","tags":["rce","office","network","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T15:58:30.819Z"}}