CVE-2026-102849
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute arbitrary code in the context of the user opening a malicious Access file, potentially leading to full workstation compromise.
Recommendation
Apply the latest Microsoft Office security updates for Access as soon as possible and avoid opening files from untrusted sources.
Other vulnerabilities in Microsoft Office Access
See all- CVE-2026-94506Medium
An out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
- CVE-2026-105717High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105716High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105714High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105598High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105597High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105596High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105595High
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105593High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105592High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS