rootpwn

critical · CVSS v3 8.8

CVE-2026-108443

An off‑by‑one bug in Microsoft Office Word can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw exists

Overview

An off‑by‑one bug in Microsoft Office Word can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw exists in the document parsing logic and can be exploited remotely without user interaction. It poses a critical threat to any environment running vulnerable Word versions.

Description

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Impact

Confidentiality: attacker can read sensitive documents. Integrity: attacker can modify or delete files. Availability: attacker can crash Word or the host system. The vulnerability affects all users of the affected Word versions, including corporate, educational, and personal environments.

Remediation

Apply the latest Microsoft Office security update that addresses CVE-2026-108443. If unable to update immediately, disable the vulnerable feature (e.g., block remote document opening) or restrict network access to Word services. Monitor for anomalous Word activity and enforce least privilege for Office processes.

Risk context

Critical severity (CVSS 8.8) indicates a high likelihood of exploitation. No EPSS data available, but the absence of a patch window increases urgency. Defenders should treat this as a top‑priority issue.

Affected products

  • Microsoft Office Word

Scores

Severity
critical
CVSS v2
10
CVSS v3
8.8
CVSS v4
—
EPSS
—

Microsoft Office Word Off-by-one Remote Code Execution Critical CVE-2026-108443

← All CVEs

Related CVEs

critical

CVE-2026-108442

Microsoft Office Word contains a use‑after‑free vulnerability that can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw is critical and can compromise any system running affected Word versions. It is a high‑risk threat for organizations that rely on Office for document processing.

View analysis

critical

CVE-2026-108444

A heap-based buffer overflow in Microsoft Office can be triggered over a network, allowing an attacker to execute arbitrary code. The flaw exists in multiple Office versions and can be exploited by unauthenticated users. It poses a significant threat to organizations using Office on networked environments.

View analysis

critical

CVE-2026-108445

Microsoft Office Word has a stack-based buffer overflow that can be triggered via a crafted document over a network. An attacker can execute arbitrary code without user interaction. This flaw is critical and can compromise any system running vulnerable Word versions.

View analysis

critical

CVE-2026-108449

A heap-based buffer overflow in Microsoft Office Word enables remote code execution over a network. The flaw can be triggered by an unauthorized attacker without user interaction. It poses a critical threat to organizations using Word.

View analysis