CVE-2026-85340

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to elevate privileges locally . The vulnerability impacts the Click-To-Run subcomponent of various Office products. Microsoft has released updates to address this issue, and users are...

CVE-2026-88109

A use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or remediation details are provided in the documents...

CVE-2026-97774

A Time-of-check time-of-use (TOCTOU) race condition exists in Microsoft Office Click-To-Run . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) . No specific details regarding the affected component, root cause file, or exploi...

CVE-2026-70276

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which may allow an authorized attacker to elevate privileges locally . This vulnerability is categorized with a CVSS 3.1 score of 7.0 (High) . Microsoft has released updates to address this issue; users are recommended to in...

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-47293: Use After Free

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2023-36568

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability...

CVE-2023-36568: Improper Link Resolution Before File Access

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2023)

This host is missing a critical security update according to Microsoft Office Click-to-Run update September 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2020-16928

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16955: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16928: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16934: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-1581: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the syste...