PT-2026-48031 · Microsoft · Office+2
CVE-2026-47635
·
Published
2026-06-09
·
Updated
2026-06-13
CVSS v3.1
8.4
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Microsoft Office (affected versions not specified)
Description
An issue in Microsoft Office, specifically affecting the Microsoft Outlook email client and Microsoft Word text editor, involves type confusion—where a resource is accessed using an incompatible type—and heap-based buffer overflow, which occurs when more data is written to a memory block than it can hold. This allows an unauthorized attacker to execute arbitrary code locally.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Office
Outlook
Office Word