rootpwn

critical · CVSS v3 8.8

CVE-2026-108451

A numeric truncation flaw in Microsoft Office Word can be exploited by an unauthenticated attacker to run arbitrary code remotely. The vulne

Overview

A numeric truncation flaw in Microsoft Office Word can be exploited by an unauthenticated attacker to run arbitrary code remotely. The vulnerability is present in recent Word versions and can be triggered via crafted documents. It poses a significant risk to organizations that rely on Word for document handling.

Description

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Impact

The flaw compromises confidentiality, integrity, and availability of affected systems. An attacker can gain code execution on the victim’s machine, potentially exfiltrating data or installing malware. Defenders should treat this as a high‑risk threat that can affect any user who opens a malicious Word document. The impact is most acute in environments with insufficient network segmentation or outdated Office installations.

Remediation

Apply the latest Microsoft Office security update that addresses CVE‑2026‑108451. Ensure that automatic updates are enabled for all Office installations. Disable or restrict macro execution and enforce document isolation policies. Monitor for anomalous outbound connections from Word processes and block known malicious IPs.

Risk context

The vulnerability is rated critical with a CVSS v3 score of 8.8, indicating a high likelihood of exploitation. No EPSS data is available, but the severity suggests immediate attention. Defenders should prioritize patching and monitoring to mitigate potential remote code execution.

Affected products

  • Microsoft Office Word
  • Windows 10
  • Windows 11
  • Office 365
  • Office 2021
  • Office 2024
  • Microsoft 365
  • Word for Mac

Scores

Severity
critical
CVSS v2
10
CVSS v3
8.8
CVSS v4
—
EPSS
—

office numeric-truncation remote-code-execution critical patch network defense

← All CVEs

Related CVEs

critical

CVE-2026-108442

Microsoft Office Word contains a use‑after‑free vulnerability that can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw is critical and can compromise any system running affected Word versions. It is a high‑risk threat for organizations that rely on Office for document processing.

View analysis

critical

CVE-2026-108443

An off‑by‑one bug in Microsoft Office Word can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw exists in the document parsing logic and can be exploited remotely without user interaction. It poses a critical threat to any environment running vulnerable Word versions.

View analysis

critical

CVE-2026-108444

A heap-based buffer overflow in Microsoft Office can be triggered over a network, allowing an attacker to execute arbitrary code. The flaw exists in multiple Office versions and can be exploited by unauthenticated users. It poses a significant threat to organizations using Office on networked environments.

View analysis

critical

CVE-2026-108445

Microsoft Office Word has a stack-based buffer overflow that can be triggered via a crafted document over a network. An attacker can execute arbitrary code without user interaction. This flaw is critical and can compromise any system running vulnerable Word versions.

View analysis