CVE Catalog
CVE-2026-81385
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk1.02%
61th percentile - higher than 61% of all known CVEs
Summary
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Risk Assessment
A remote attacker could exploit the vulnerability to execute malicious code on the victim's machine, potentially leading to full system compromise.
Recommendation
Install the latest security updates for Microsoft Office Publisher.
Other vulnerabilities in Microsoft Office Publisher
Original NVD description (English source)
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS