CVE-2026-108427
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS
8.8
High
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Oct 15, 2026 · Last modified: Oct 15, 2026 · CWE-20 · CWE-122
Not enough EPSS history yet.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-110916——
———Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)9hCVE-2026-1084518.8 HIG—
———Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.10hCVE-2026-1084508.8 HIG—
———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.10hCVE-2026-1084498.8 HIG—
———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.10hCVE-2026-1084487.5 HIG—
———Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.10hCVE-2026-1084478.8 HIG—
———Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.10h