{"metadata": {"vulnerability": "CVE-2026-88156", "count": 28, "kinds": {"milestone": 7, "sighting": 7, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0422", "record": "NCSC-2026-0422", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-09T21:58:19.187Z", "date_only": false, "value": "2026-09-09T21:58:19.187Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-88156", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-88156", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-88156", "record": "FKIE_CVE-2026-88156", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1312", "record": "CERTFR-2026-AVI-1312", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T11:36:28Z", "date_only": false, "value": "2026-10-13T11:36:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0422", "record": "CVE-2026-88156", "field": "creation_timestamp", "uuid": "372264b8-7b42-4a87-9f4b-2b28c448b93e", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0422"}, {"timestamp": "2026-10-13T14:00:00Z", "date_only": false, "value": "2026-10-13T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-88156", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:36:28.842Z", "date_only": false, "value": "2026-10-13T18:36:28.842437Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0422", "record": "NCSC-2026-0422", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:36:28.842Z", "date_only": false, "value": "2026-10-13T18:36:28.842437Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0422", "record": "NCSC-2026-0422", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:36:28.842Z", "date_only": false, "value": "2026-10-13T18:36:28.842437Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0422", "record": "NCSC-2026-0422", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T19:00:29.906Z", "date_only": false, "value": "2026-10-13T19:00:29.906Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-88156", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:21:35Z", "date_only": false, "value": "2026-10-13T19:21:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PXGG-C4XH-W6PG", "record": "GHSA-PXGG-C4XH-W6PG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T19:21:35.710Z", "date_only": false, "value": "2026-10-13T19:21:35.710", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-88156", "record": "FKIE_CVE-2026-88156", "field": "published"}, {"timestamp": "2026-10-13T19:44:43.469Z", "date_only": false, "value": "2026-10-13T19:44:43.469948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/moltenbit.bsky.social/post/3mxrs7v46ds2t", "record": "CVE-2026-88156", "field": "creation_timestamp", "uuid": "ed29a861-e452-40b9-86a8-a539701377e5", "content": "two of my findings are in today's Microsoft Patch Tuesday.\n\nCVE-2026-88156: Outlook RCE, stack overflow, 9.8. previewing the mail in the reading pane is enough.\nCVE-2026-70343: MPEG-2 Video Extension RCE, heap overflow, 8.8. user has to open a crafted file.\n\n#infosec #patchtuesday #cve #microsoft", "url": "https://bsky.app/profile/moltenbit.bsky.social/post/3mxrs7v46ds2t"}, {"timestamp": "2026-10-13T21:36:47Z", "date_only": false, "value": "2026-10-13T21:36:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PXGG-C4XH-W6PG", "record": "GHSA-PXGG-C4XH-W6PG", "field": "published"}, {"timestamp": "2026-10-13T21:36:47Z", "date_only": false, "value": "2026-10-13T21:36:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PXGG-C4XH-W6PG", "record": "GHSA-PXGG-C4XH-W6PG", "field": "modified"}, {"timestamp": "2026-10-13T22:11:44.274Z", "date_only": false, "value": "2026-10-13T22:11:44.274929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2gsi6n62q", "record": "CVE-2026-88156", "field": "creation_timestamp", "uuid": "c0c67271-5f95-45de-a4c8-6a690c5c88e4", "content": "\ud83d\udea8 CVE-2026-88156 \u2014 CVSS 9.8 CRITICAL\n\nStack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code ove...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88156\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2gsi6n62q"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1312", "record": "CERTFR-2026-AVI-1312", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1312", "record": "CERTFR-2026-AVI-1312", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1312", "record": "CERTFR-2026-AVI-1312", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T00:10:04.559Z", "date_only": false, "value": "2026-10-14T00:10:04.559815Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsb2etrz22n", "record": "CVE-2026-88156", "field": "creation_timestamp", "uuid": "b2dbe0e0-6fc0-4d79-9019-83a4d0e205c1", "content": "CVE-2026-88156 - microsoft 365 apps for enterprise\nOutlook on Windows and Mac can be tricked into executing harmful programs when it receives specially crafted messages, allowing an attacker to take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsb2etrz22n"}, {"timestamp": "2026-10-14T01:49:33Z", "date_only": false, "value": "2026-10-14T01:49:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "record": "CVE-2026-88156", "field": "creation_timestamp", "uuid": "de62bbd8-f7b7-4422-af28-337f0c9bcf75", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25"}, {"timestamp": "2026-10-14T03:56:59.694Z", "date_only": false, "value": "2026-10-14T03:56:59.694Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-88156", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T09:16:52.015Z", "date_only": false, "value": "2026-10-14T09:16:52.015260Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117438507269156345", "record": "CVE-2026-88156", "field": "creation_timestamp", "uuid": "04d7fcb4-cb35-435f-8cfb-cb2e8d0bfb2d", "content": "CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-88156https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156#microsoft #Microsoft #Microsoft365AppsforEnterprise #MicrosoftOffice365forMac #MicrosoftOfficeLTSC2021 #MicrosoftOfficeLTSC2024 #MicrosoftOfficeLTSCforMac2021 #MicrosoftOfficeLTSCforMac2024#CVE_2026_88156#bot", "url": "https://infosec.exchange/users/cve/statuses/117438507269156345"}, {"timestamp": "2026-10-15T21:19:05.207Z", "date_only": false, "value": "2026-10-15T21:19:05.207", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-88156", "record": "FKIE_CVE-2026-88156", "field": "lastModified"}, {"timestamp": "2026-10-16T06:07:07.001Z", "date_only": false, "value": "2026-10-16T06:07:07.001017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxxvwomgdn2q", "record": "CVE-2026-88156", "field": "creation_timestamp", "uuid": "a1a8b427-fea4-42a9-a5b6-24a7517480d4", "content": "\ud83d\udccc CVE-2026-88156 - Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-88156", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxxvwomgdn2q"}, {"timestamp": "2026-10-16T21:17:38.097Z", "date_only": false, "value": "2026-10-16T21:17:38.097Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-88156", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:17:38.097Z", "date_only": false, "value": "2026-10-16T21:17:38.097Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-88156", "field": "containers.cna.providerMetadata.dateUpdated"}]}