{"id":"CVE-2026-97012","published":"2026-10-13T19:22:10.293","lastModified":"2026-10-15T16:16:06.930","description":"Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97012","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code when processing specially crafted email messages. This vulnerability could enable attackers to gain full control of affected systems.","exploitability":"Exploitation requires a user to open a malicious email attachment or click on a link that triggers Outlook's processing of vulnerable content, making it moderately difficult but possible to achieve remote code execution.","blast_radius":"If exploited, this vulnerability could allow attackers to compromise any system running affected versions of Microsoft Office, potentially leading to widespread network infiltration and data exfiltration.","remediation":"Deploy the Microsoft Office 2021 Security Update KB5043897 or Office 2024 Security Update KB5043898 immediately, as these patches address the buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","email","office"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:19:39.886Z"}}