Heap-Based Buffer Overflow in Microsoft Office Word by Microsoft

CVE-2026-108449

What is CVE-2026-108449?

A heap-based buffer overflow vulnerability in Microsoft Office Word enables an unauthorized attacker to execute arbitrary code through a network connection. This flaw can be exploited to gain unauthorized control of affected systems, potentially leading to data compromise or further exploitation. It is critical for users to apply updates and patches provided by Microsoft to mitigate the risk associated with this vulnerability. For more information, refer to the Microsoft advisory.

References