{"id":"CVE-2026-70257","published":"2026-10-13T19:19:44.127","lastModified":"2026-10-15T16:18:32.420","description":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70257","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code on affected systems. This vulnerability arises from improper bounds checking when processing specially crafted email messages, potentially enabling attackers to gain full system control.","exploitability":"Exploitation requires a user to open a malicious email attachment or view a crafted email message, making it moderately difficult to achieve initial compromise without social engineering.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on thousands of endpoints running affected Office versions, potentially leading to widespread system compromise across organizations.","remediation":"Deploy the Microsoft security update KB5042861 immediately for Outlook 2021 and Outlook 2024 installations.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","email","office","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:56:19.276Z"}}