{"id":"CVE-2026-70256","published":"2026-10-13T19:19:44.007","lastModified":"2026-10-15T16:18:59.787","description":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70256","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code on affected systems. This vulnerability arises from insufficient bounds checking when processing specific data structures, potentially enabling attackers to gain full system control.","exploitability":"Exploitation requires a user to open a maliciously crafted file or receive a specially crafted email message, making it moderately difficult to achieve without social engineering but possible with a well-crafted phishing campaign.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on any affected Outlook installation, potentially leading to full system compromise and data exfiltration across an organization's email infrastructure.","remediation":"Deploy the Microsoft Office 2024 update KB5039827 immediately to address this heap buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","email","office"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:56:14.315Z"}}