Description
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published: 2026-09-08
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Microsoft Office Outlook contains a heap‑based buffer overflow that allows an unauthorized attacker to execute code over a network.

Affected Systems

Affected products are Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, and Microsoft Outlook 2016. The data does not list specific version ranges.

Risk and Exploitability

The CVSS score of 8.8 indicates a high severity vulnerability. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The flaw permits remote execution of code over a network, but the CVE description does not specify the exact exploitation method or prerequisites.

Generated by OpenCVE AI on September 9, 2026 at 00:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the security update that fixes CVE-2026-69629 for all affected Office and Outlook products.
  • If the update is not listed for your specific deployment, contact Microsoft Support for assistance.
  • Monitor the Outlook client after updating for any abnormal activity that could indicate exploitation attempts.

Generated by OpenCVE AI on September 9, 2026 at 00:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 08 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Description Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Title Microsoft Office Outlook Remote Code Execution Vulnerability
First Time appeared Microsoft
Microsoft 365 Apps
Microsoft office 2019
Microsoft office 2021
Microsoft office 2024
Microsoft outlook 2016
Weaknesses CWE-122
CPEs cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*
cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*
cpe:2.3:a:microsoft:outlook_2016:*:*:*:*:*:x86:*:*
Vendors & Products Microsoft
Microsoft 365 Apps
Microsoft office 2019
Microsoft office 2021
Microsoft office 2024
Microsoft outlook 2016
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft 365 Apps Office 2019 Office 2021 Office 2024 Outlook 2016
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-09-08T23:40:37.903Z

Reserved: 2026-08-03T21:24:59.407Z

Link: CVE-2026-69629

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-08T18:19:35.290

Modified: 2026-09-08T18:39:34.660

Link: CVE-2026-69629

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-09T00:15:17Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow