CVE-2026-105597

Summary

A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code when processing malicious files. This vulnerability is particularly concerning because it affects widely used Office applications and can be exploited over a network without user interaction.

Exploitability

Exploitation is moderately difficult as it requires an attacker to deliver a specially crafted file that triggers the buffer overflow, but once triggered, the vulnerability allows for remote code execution with high privileges.

Blast radius

The impact could be significant across organizations using Office 2021 or Office 2024, especially if users open malicious files from email attachments or shared network drives.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2024 update KB5039876 or Office 2021 update KB5039877 immediately to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.