CVE-2026-108442
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS
8.8
High
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Oct 15, 2026 · Last modified: Oct 15, 2026 · CWE-416
Not enough EPSS history yet.
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-110922——
———Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)5hCVE-2026-110921——
———Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)5hCVE-2026-110919——
———Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)5hCVE-2026-110915——
———Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)5hCVE-2026-1084468.8 HIG—
———Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.6hCVE-2026-1084386.5 MED—
———Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.6h