{"id":"CVE-2026-70242","published":"2026-10-13T19:19:40.990","lastModified":"2026-10-15T16:19:49.843","description":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70242","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code on affected systems. This vulnerability arises from improper bounds checking when processing specially crafted data, potentially enabling attackers to gain full control over the target system.","exploitability":"Exploitation is likely straightforward for remote attackers with minimal preconditions, requiring only a single malicious email or file delivery to trigger the buffer overflow and execute code.","blast_radius":"The impact could be severe across organizations using Outlook, as successful exploitation would allow attackers to execute code remotely on user workstations, potentially leading to full system compromise and lateral movement.","remediation":"Deploy Microsoft Security Update KB5042189 immediately, as it addresses this specific heap buffer overflow vulnerability in Outlook.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","email","outlook","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:48:40.660Z"}}