CVE-2026-102855
HighCVSS 8.8Summary
A heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code on the victim's system, potentially leading to full system compromise and data breach.
Recommendation
Install the latest security updates for Microsoft Office Visio and restrict access to Visio files from untrusted sources.
Other vulnerabilities in Microsoft Office Visio
See all- CVE-2026-102857High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2026-102856High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2022-44696High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2022-44695High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-44694High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24510High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24509High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-24461High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2021-38654High
Remote code execution vulnerability in Microsoft Office Visio. It could allow an attacker to execute code on the victim's system.
- CVE-2021-38653High
Remote code execution vulnerability in Microsoft Office Visio. Similar to other Visio flaws, it could allow an attacker to run code.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS