rootpwn

critical · CVSS v3 8.8

CVE-2026-108447

A heap-based buffer overflow in Microsoft Office Word enables an attacker to execute code over a network. The flaw can be triggered by a cra

Overview

A heap-based buffer overflow in Microsoft Office Word enables an attacker to execute code over a network. The flaw can be triggered by a crafted document, potentially compromising any system that opens it. It is critical because it allows remote code execution without user interaction.

Description

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Impact

The vulnerability threatens confidentiality, integrity, and availability of affected systems. Unauthorized code execution can lead to data exfiltration, system compromise, and service disruption. End users, corporate networks, and cloud tenants are all at risk.

Remediation

Apply the latest Office security updates immediately; enable automatic updates to ensure timely patching. Disable or restrict macro execution and use Office’s built-in protection settings. Employ network segmentation and monitor for anomalous outbound traffic from Office processes.

Risk context

Severity is critical with a CVSS v3 score of 8.8. The lack of an EPSS score suggests no current public exploitation data, but the high severity warrants prompt action.

Affected products

  • Microsoft Office Word
  • Microsoft Office 365
  • Microsoft Office 2021
  • Microsoft Office 2023
  • Microsoft Office for Windows
  • Microsoft Office for Mac

Scores

Severity
critical
CVSS v2
10
CVSS v3
8.8
CVSS v4
—
EPSS
—

buffer-overflow office-word critical heap network-exploit patch defense

← All CVEs

Related CVEs

critical

CVE-2026-108442

Microsoft Office Word contains a use‑after‑free vulnerability that can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw is critical and can compromise any system running affected Word versions. It is a high‑risk threat for organizations that rely on Office for document processing.

View analysis

critical

CVE-2026-108443

An off‑by‑one bug in Microsoft Office Word can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw exists in the document parsing logic and can be exploited remotely without user interaction. It poses a critical threat to any environment running vulnerable Word versions.

View analysis

critical

CVE-2026-108444

A heap-based buffer overflow in Microsoft Office can be triggered over a network, allowing an attacker to execute arbitrary code. The flaw exists in multiple Office versions and can be exploited by unauthenticated users. It poses a significant threat to organizations using Office on networked environments.

View analysis

critical

CVE-2026-108445

Microsoft Office Word has a stack-based buffer overflow that can be triggered via a crafted document over a network. An attacker can execute arbitrary code without user interaction. This flaw is critical and can compromise any system running vulnerable Word versions.

View analysis