[ CVE-2026-100208 · Published 25 Sep 2026 ]
Vulnerability in Microsoft 365 Apps for Enterprise
CVSS 8.1
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
[ Fixes ]Fixes and patches
- Security bulletin: Microsoft Office CVE-2026-100208Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100208, cited by CERT-FR CERTFR-2026-AVI-1266
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1266
Vulnerability in Microsoft Office Translated from French
A vulnerability has been discovered in Microsoft Office. It allows an attacker to cause remote arbitrary code execution.