CVE Catalog

CVE-2026-66807

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.36%

29th percentile - higher than 29% of all known CVEs

Summary

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Risk Assessment

An attacker could gain control of the system if a user opens a malicious file.

Recommendation

Install the latest security updates for Microsoft Office.

Original NVD description (English source)

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS