PT-2026-48027

Name of the Vulnerable Software and Affected Versions Microsoft Office and Microsoft 365 Apps for Enterprise affected versions not specified Description A use-after-free issue exists in the Click-to-Run C2R service. A use-after-free occurs when an application continues to use a pointer after it h...

Click-to-Run Package Privilege Escalation

The vulnerability of the Click-to-Run package technology for Microsoft Office and Office 365 is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Click-to-Run Package Privilege Escalation

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Click-to-Run Package Privilege Escalation

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...

Click-to-Run Package Privilege Escalation

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...

Security Updates for Microsoft Office Products C2R (May 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-40358 - Heap-based buffer overflow in Microsoft Office allows an unauthorized...

CVE-2026-40420

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-40418

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-35436

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

EUVD-2026-29677

Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

EUVD-2026-29675

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-40420

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-40418

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-35436

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

...

CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

...

CVE-2026-40420

CVE-2026-40420 : Affected product: Microsoft Office Click-To-Run. Description: Improper access control allows an authorized attacker to elevate privileges locally. The vulnerability is described across multiple sources (NVD, CVE lists) with a high impact score (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:C/C...

CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

...

CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

...

CVE-2026-35436

CVE-2026-35436 describes an elevation of privilege vulnerability in Microsoft Office Click-To-Run caused by insufficient granularity of access control. The CVE affects Office Click-To-Run components, enabling an attacker with LOCAL access and LOW privileges, and with NO user interaction, to achie...