{"id":"CVE-2026-88197","published":"2026-10-13T19:21:41.283","lastModified":"2026-10-15T21:19:09.060","description":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88197","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Office allows remote attackers to execute arbitrary code on affected systems when processing malicious files. This vulnerability is particularly dangerous because it can be triggered over a network without user interaction, making it ideal for remote exploitation.","exploitability":"Exploitation is relatively straightforward with no special preconditions required, as the vulnerability can be triggered by opening a malicious Office document over a network share or via email attachment.","blast_radius":"The impact could be widespread across organizations using Microsoft 365 apps, Office 2021, and Office 2024, potentially leading to full system compromise and lateral movement within networks.","remediation":"Deploy the Microsoft security update KB5048597 immediately to address this vulnerability in all affected Office versions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","remote-exploitation","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:17:28.351Z"}}