CVE-2026-105715
HighCVSS 7.5Summary
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute arbitrary code in the context of the user opening a malicious file, potentially leading to system compromise.
Recommendation
Install the latest Microsoft Office security updates as soon as possible and avoid opening Word files from untrusted sources.
Other vulnerabilities in Microsoft Office Word
See all- CVE-2026-97001High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-96996High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-96995High
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
- CVE-2026-88210High
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-88202High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The issue stems from improper memory handling during document processing.
- CVE-2026-88186High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-88185High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-88150High
A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-83891High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-70302High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS