Live · 98 sources · updated 13m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-102858

CVSS 8.8

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

Vendor
Microsoft
Product
office
CVSS
8.8
EPSS
0.009 (p58)
Exposure class
Collaboration

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. Advisory MSRC

    CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers…

    Fix available CVE-2026-102858 Microsoft
  2. CVE NVD

    Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

    Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help