Priority MEDIUM 43
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01288 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-502
Priority MEDIUM 42
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-190
