CVE Catalog

CVE-2026-64898

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.34%

27th percentile - higher than 27% of all known CVEs

Summary

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Risk Assessment

An attacker could gain control of the system by executing malicious code, potentially leading to data theft or malware installation.

Recommendation

Install the latest security updates for Microsoft Office.

Original NVD description (English source)

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS