CVE Catalog
CVE-2026-70130
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk0.35%
28th percentile - higher than 28% of all known CVEs
Summary
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
Risk Assessment
An attacker can execute arbitrary code in the user's context, potentially leading to system compromise or data theft.
Recommendation
Update Microsoft Office to the latest version containing the security fix.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.