CVE-2026-105595

Summary

A memory safety flaw in Microsoft Office Access allows attackers to read beyond allocated buffer boundaries, potentially leading to arbitrary code execution when processing malicious files over a network. This represents a significant security risk as it can be exploited remotely without user interaction.

Exploitability

Exploitation is moderately difficult and requires an attacker to deliver a specially crafted malicious file to a target system, though the attack can be executed remotely with no user interaction once the file is opened.

Blast radius

The vulnerability affects Microsoft 365 apps, Office 2021, and Office 2024, meaning a substantial portion of enterprise users could be impacted by a successful exploitation attempt.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 or Office 2024 update that includes the fix for CVE-2026-105595, specifically the April 2026 security updates.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.