CVE-2026-97774

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-88109

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-85340

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-70276

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-85340

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to elevate privileges locally . The vulnerability impacts the Click-To-Run subcomponent of various Office products. Microsoft has released updates to address this issue, and users are...

CVE-2026-88109

A use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or remediation details are provided in the documents...

EUVD-2026-99831

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-97774

A Time-of-check time-of-use (TOCTOU) race condition exists in Microsoft Office Click-To-Run . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) . No specific details regarding the affected component, root cause file, or exploi...

CVE-2026-70276

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which may allow an authorized attacker to elevate privileges locally . This vulnerability is categorized with a CVSS 3.1 score of 7.0 (High) . Microsoft has released updates to address this issue; users are recommended to in...

vulnerabilities present in Microsoft Office

Microsoft has fixed xxx vulnerabilities in various Office products, such as Word, Excel, Access, Outlook, Visio, SharePoint, and PowerPoint, as well as subcomponents like Shell, Azure Key Vault, and Click-to-Run. A malicious actor could exploit these vulnerabilities to cause a denial-of, gain...

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-88109: Use After Free

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-97774: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-85340: Use After Free

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-70276: Use After Free

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

PT-2026-113211

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-85340: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-70276: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

Security Updates for Microsoft PowerPoint Products C2R (August 2026)

The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...