Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
7472 articles · 235603 vulns · 36/41 feeds (7d)
← Back to list
9.8
CVE-2026-70242PATCHED
microsoft · microsoft 365 apps for enterpri

Microsoft Office Outlook Remote Code Execution Vulnerability

Description

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Affected Products

VendorProductVersions
microsoftmicrosoft 365 apps for enterpri16.0.1, 16.0.1, 16.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftmicrosoft office onlinecert_advisory90%
microsoftsharepointcert_advisory90%
microsoftmicrosoft 365 appscert_advisory90%
microsoftskypecert_advisory90%
microsoftofficecert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70242(vendor-advisory, patch)

Related News (5 articles)

Tier B
BSI Advisories13h ago
[NEU] [kritisch] Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
→ No new info (linked only)
Tier D
Infosecurity Magazine17h ago
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
→ No new info (linked only)
Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Microsoft Office (14 octobre 2026)
→ No new info (linked only)
Tier C
VulDB1d ago
CVE-2026-70242 | Microsoft Office Outlook heap-based overflow
→ No new info (linked only)
Tier A
Microsoft MSRC1d ago
CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://aka.ms/OfficeSecurityReleases16.0.14334.2097416.0.17932.21056
CWECWE-122
PublishedOct 13, 2026
Last enriched1d ago
Trending Score64
Source articles5
Independent5
Info Completeness5/14
Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 133
HIGHCVE-2026-85880EXPKEV
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Trending: 70
HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 69
CRITICALCVE-2026-100202
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Trending: 66
HIGHCVE-2026-108398
.NET Framework Security Feature Bypass Vulnerability
Trending: 64

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Oct 13, 2026
Discovered by ZDM
Oct 13, 2026
Patch Available
Oct 14, 2026