PT-2026-48031 · Microsoft · Office+2

CVE-2026-47635

·

Published

2026-06-09

·

Updated

2026-06-13

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified)
Description An issue in Microsoft Office, specifically affecting the Microsoft Outlook email client and Microsoft Word text editor, involves type confusion—where a resource is accessed using an incompatible type—and heap-based buffer overflow, which occurs when more data is written to a memory block than it can hold. This allows an unauthorized attacker to execute arbitrary code locally.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-08114
CVE-2026-47635

Affected Products

Office
Outlook
Office Word