{"id":"CVE-2026-97016","published":"2026-10-13T19:22:10.530","lastModified":"2026-10-15T16:15:40.687","description":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["365 apps","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97016","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code on affected systems. This vulnerability occurs when Outlook processes specially crafted email content, potentially enabling attackers to gain full control over the target system.","exploitability":"Exploitation is relatively straightforward as it requires only a single malicious email sent to a victim with Outlook open, with no user interaction needed once the email is processed.","blast_radius":"The impact could be severe across enterprise environments where Outlook is widely used, potentially allowing attackers to compromise multiple user accounts and establish persistent access to corporate networks.","remediation":"Deploy Microsoft Security Update KB5042819 immediately as this is the specific patch addressing CVE-2026-97016.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","email","microsoft","outlook"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:51:59.583Z"}}