{"id":"CVE-2026-70282","published":"2026-10-13T19:19:47.770","lastModified":"2026-10-15T16:17:39.230","description":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70282","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code when processing specially crafted email messages. This vulnerability could enable attackers to gain full control of affected systems.","exploitability":"Exploitation requires a user to open a malicious email attachment or view a crafted email message, making it moderately difficult to achieve without social engineering but possible over a network.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on user workstations running affected Office versions, potentially leading to full system compromise and data exfiltration.","remediation":"Deploy the Microsoft security update KB5042789 for Outlook 2021 and Outlook 2024, or upgrade to Microsoft 365 Apps for enterprise version 2408 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","email","office"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:56:51.517Z"}}