CVE-2026-70301

Summary

A heap-based buffer overflow in Microsoft Word allows remote attackers to execute arbitrary code when processing maliciously crafted documents. This vulnerability could enable attackers to gain full control of affected systems without user interaction.

Exploitability

Exploitation is moderately difficult as it requires a user to open a specially crafted Word document, but the attack can be delivered over the network with minimal user interaction needed once the document is opened.

Blast radius

The vulnerability affects Microsoft 365 apps, Office 2021, and Office 2024, potentially impacting thousands of enterprise endpoints that regularly process Word documents, making it a high-impact target for widespread exploitation.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Security Update KB5044789 immediately to protect against this vulnerability in all affected versions of Microsoft Office.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.