342 matches found
CVE-2026-40418 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40418 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40418
Technical details (affected product, vulnerable component, version, exploit method) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2026-40419
CVE-2026-40419 : A use-after-free vulnerability in Microsoft Office (Click-To-Run) could allow an authorized local attacker to achieve elevation of privilege. The underlying cause is a use-after-free issue in Office components, leading to local privilege escalation. Documented impact is local, wi...
CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
Description of the security update for Word 2016: May 12, 2026 (KB5002858)
Description of the security update for Word 2016: May 12, 2026 KB5002858 Applies To Word 2016 Summary This security update resolves a Microsoft Office remote code execution vulnerability and Microsoft Word Information Disclosure Vulnerability. To learn more about the vulnerabilities, see the...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
PT-2026-40228
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
PT-2026-40188
Name of the Vulnerable Software and Affected Versions Microsoft Office Click-To-Run affected versions not specified Description Insufficient granularity of access control in the Click-to-Run C2R technology of Microsoft Office and Microsoft 365 Apps for Enterprise allows an authorized attacker to...
PT-2026-40230
Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
Description of the security update for Office 2016: April 14, 2026 (KB5002859)
Description of the security update for Office 2016: April 14, 2026 KB5002859 Applies To Office Professional Plus 2016 Office Professional 2016 Office Standard 2016 Office Home and Business 2016 Office Home and Student 2016 Summary This security update resolves a Microsoft Office remote code...
Description of the security update for Office 2016: March 10, 2026 (KB5002838)
Description of the security update for Office 2016: March 10, 2026 KB5002838 Applies To Office Professional Plus 2016 Office Professional 2016 Office Standard 2016 Office Home and Business 2016 Office Home and Student 2016 Summary This security update resolves a Microsoft Office remote code...
Description of the security update for Word 2016: February 10, 2026 (KB5002839)
Description of the security update for Word 2016: February 10, 2026 KB5002839 Applies To Word 2016 Summary This security update resolves a Microsoft Outlook spoofing vulnerability and Microsoft Word spoofing vulnerability. To learn more about the vulnerabilities, see the following security...
Click-to-Run Package Services Privilege Escalation
The vulnerability of the Click-to-Run package services for Microsoft Office and Microsoft SharePoint Server is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges by sending specially crafted malicious files...
Security Updates for Microsoft Word Products C2R (January 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2026-20944, CVE-2026-20948 Note that Nessus has not tested fo...