CVE-2026-108445 Microsoft CVE debrief

Who should care

Defenders of Microsoft Office Word deployments, including IT security teams, vulnerability management teams, and system administrators, should assess exposure and prioritize patching. This vulnerability's high severity and potential for code execution over a network make it a critical concern for organizations using Microsoft Office Word. These teams should review the supplied official advisory or CVE record to and

Why it matters

CVE-2026-108445 is a high-severity vulnerability in Microsoft Office Word that allows unauthorized attackers to execute code over a network. Defenders should assess exposure and prioritize patching.

• Potential code execution over a network
• High severity vulnerability in widely used software

Technical summary

CVE-2026-108445 is a stack-based buffer overflow vulnerability in Microsoft Office Word. This vulnerability allows unauthorized attackers to execute code over a network, which can lead to significant operational impacts. The vulnerability is considered high-severity and affects Microsoft Office Word deployments. Defenders should assess exposure and prioritize patching to mitigate potential risks.

Defensive priority

Assess exposure, prioritize patching

Recommended defensive actions

• Assess exposure of Microsoft Office Word deployments
• Prioritize patching
• Verify network access controls

Evidence notes

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Official CVE Program and NVD records indicate high severity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.