Assessment
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- Severity
- Important
- CVSS base score
- 8.8
- Impact
- Remote Code Execution
- Exploitation detected
- No known exploitation (MSRC assessment)
- Exploitability
- Exploitation Less Likely
- Publicly disclosed
- No (MSRC assessment)
- EPSS · 30-day forecast
- No EPSS score collected
- Customer action
- Required: follow the MSRC remediation guidance
More details
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- Public detection template
- No Nuclei template is listed in the current collected catalog
- Component
- Microsoft Office Word
- Weakness
- CWE-122: Heap-based Buffer Overflow
- Issued by
- Microsoft
- Last revised
- 10 Nov 2026
CVSS 3.1 base metricsRed raises the risk · green lowers it
- Attack vector
- NetworkAV:N
- Attack complexity
- LowAC:L
- Privileges required
- NonePR:N
- User interaction
- RequiredUI:R
- Scope
- UnchangedS:U
- Confidentiality
- HighC:H
- Integrity
- HighI:H
- Availability
- HighA:H
Updates that fix it
0 KBsNo KB listed
No KB update is listed in the collected MSRC record. Check the MSRC advisory for product releases and other remedies.
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this versionField-level log (0)
Up to 100 recent field edits are shown; older edits may be outside retention.
No retained field changes for this selection.
Explore global source statements, affected packages and advisory history for CVE-2026-110050. The catalog has a separate collection scope from Microsoft release records.
cve-program · CVE-2026-110050
PublishedMicrosoft 365 Apps for Enterprise
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft 365 Apps for Enterprise",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office 365 for Mac
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft Office 365 for Mac",
"versions": [
{
"version": "1.0.0",
"lessThan": "16.115.26110837",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC 2021
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC 2021",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "16.0.14334.21048",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC 2024
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC 2024",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.0",
"lessThan": "16.0.17932.21140",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC for Mac 2021
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2021",
"versions": [
{
"version": "16.0.1",
"lessThan": "16.115.26110837",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Office LTSC for Mac 2024
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2024",
"versions": [
{
"version": "16.0.0",
"lessThan": "16.115.26110837",
"versionType": "custom",
"status": "affected"
}
]
}Original source record · Cite this exact observation · Complete original publisher JSON