{"id":"CVE-2026-88156","published":"2026-10-13T19:21:35.710","lastModified":"2026-10-15T21:19:05.207","description":"Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code when processing specially crafted email messages. This vulnerability is particularly dangerous because it can be triggered over the network without user interaction, making it ideal for remote exploitation.","exploitability":"Exploitation is relatively straightforward with a pre-condition of receiving a malicious email message that triggers the buffer overflow during message processing, requiring no user interaction once the email arrives.","blast_radius":"The impact could be widespread as Outlook is commonly used across organizations, potentially allowing attackers to gain full system access on affected machines when users receive compromised emails.","remediation":"Deploy Microsoft Security Update KB5042817 immediately, as it addresses this specific buffer overflow vulnerability in Outlook.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","email","microsoft","outlook"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:50:51.187Z"}}