CVE-2026-105592
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute malicious code on the victim's machine, potentially leading to system compromise or data theft.
Recommendation
Install the latest security updates for Microsoft Office Access.
Other vulnerabilities in Microsoft Office Access
See all- CVE-2026-94506Medium
An out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
- CVE-2026-105717High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105716High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105714High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105598High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105597High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105596High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105595High
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105593High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105591High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS