CVE-2026-102857
HighCVSS 8.8Summary
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute arbitrary code in the context of the user opening a malicious Visio file, potentially leading to full workstation compromise.
Recommendation
Apply the latest Microsoft Office security updates for Visio as soon as possible and avoid opening files from untrusted sources.
Other vulnerabilities in Microsoft Office Visio
See all- CVE-2026-102855High
A heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2026-102856High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2022-44696High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2022-44695High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-44694High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24510High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24509High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-24461High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2021-38654High
Remote code execution vulnerability in Microsoft Office Visio. It could allow an attacker to execute code on the victim's system.
- CVE-2021-38653High
Remote code execution vulnerability in Microsoft Office Visio. Similar to other Visio flaws, it could allow an attacker to run code.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS