CVE-2026-105717

Summary

A heap-based buffer overflow in Microsoft Office Access allows remote attackers to execute arbitrary code on affected systems. This vulnerability is particularly concerning because it affects widely used Office applications and can be exploited over a network without user interaction.

Exploitability

Exploitation is moderately difficult requiring a crafted malicious file that triggers the buffer overflow, with no user interaction needed once the file is opened or accessed.

Blast radius

The vulnerability could impact thousands of users across organizations since Office Access is commonly used and the exploit can be delivered via network shares, email attachments, or web downloads.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 Security Update KB5043798 or Office 2024 Security Update KB5043799 immediately to all affected systems.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.