CVE-2026-70329

Published Aug 11, 2026

Last updated 6 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-70329 is a vulnerability identified as an integer overflow or wraparound issue within Microsoft Office Outlook. This flaw enables an unauthorized attacker to execute code over a network. Exploitation of this vulnerability typically requires user interaction, such as opening a specially crafted malicious attachment. Microsoft addressed this issue as part of its August 2026 Patch Tuesday updates, affecting various versions including Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, LTSC 2024, and standalone Microsoft Outlook 2016.

Description
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Source
secure@microsoft.com
NVD status
Analyzed
Products
365_apps, office_2019, office_2021, office_2024, outlook

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

secure@microsoft.com
CWE-190

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.