CVE-2026-108431
8.8HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
Remote attackers can execute arbitrary code with the user's privileges if a target opens a malicious Word document. Exploitation requires user interaction to open the file.
Root cause
A stack-based buffer overflow flaw in Microsoft Office Word allows memory corruption when parsing malformed documents.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Check the Microsoft Security Response Center advisory for updated Microsoft Word builds and apply the provided patch. As an interim workaround, block inbound email attachments with Word file formats or enforce Word Protected View.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.