CVE-2026-97012

Summary

A stack-based buffer overflow in Microsoft Outlook allows remote attackers to execute arbitrary code when processing specially crafted email messages. This vulnerability could enable attackers to gain full control of affected systems.

Exploitability

Exploitation requires a user to open a malicious email attachment or click on a link that triggers Outlook's processing of vulnerable content, making it moderately difficult but possible to achieve remote code execution.

Blast radius

If exploited, this vulnerability could allow attackers to compromise any system running affected versions of Microsoft Office, potentially leading to widespread network infiltration and data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office 2021 Security Update KB5043897 or Office 2024 Security Update KB5043898 immediately, as these patches address the buffer overflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.