{"id":"CVE-2026-70301","published":"2026-10-13T19:19:50.123","lastModified":"2026-10-15T21:17:47.237","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70301","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Word allows remote attackers to execute arbitrary code when processing maliciously crafted documents. This vulnerability could enable attackers to gain full control of affected systems without user interaction.","exploitability":"Exploitation is moderately difficult as it requires a user to open a specially crafted Word document, but the attack can be delivered over the network with minimal user interaction needed once the document is opened.","blast_radius":"The vulnerability affects Microsoft 365 apps, Office 2021, and Office 2024, potentially impacting thousands of enterprise endpoints that regularly process Word documents, making it a high-impact target for widespread exploitation.","remediation":"Deploy the Microsoft Security Update KB5044789 immediately to protect against this vulnerability in all affected versions of Microsoft Office.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","word","office","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:57:13.323Z"}}