---
id: "CVE-2026-110049"
page: "https://infrastack.ai/live/CVE-2026-110049"
kind: "vulnerability"
aliases: ["CVE-2026-110049"]
title: "Microsoft Word: heap buffer overflow lets a local attacker run code"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["microsoft-office", "other", "windows", "word"]
not_affected_if: []
published_at: "2026-11-10T19:18:21+00:00"
first_seen_at: "2026-11-10T19:24:26+00:00"
updated_at: "2026-11-10T19:42:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110049", "first_seen_at": "2026-11-10T19:24:26+00:00"}]
exploit_sources: []
---

# Microsoft Word: heap buffer overflow lets a local attacker run code

Link for people: https://infrastack.ai/live/CVE-2026-110049 (this .md is for agents)

A heap-based buffer overflow in Microsoft Office Word lets an unauthorized attacker run code on the machine where Word runs. The attack is local, so the attacker needs access to the machine or a way to get a user to open a crafted file.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110049

## From the sources

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_