CVE-2026-70276: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Other sources
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.17932.21056 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.14334.20974
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running Microsoft 365 Apps for Enterprise, Microsoft Office Click-To-Run, or the listed 32-bit or 64-bit editions of Office LTSC 2021 and Office LTSC 2024 are in scope.
What does an attacker need to exploit it?
The attacker must already be authorized on the affected system and able to act locally. The provided information does not indicate that user interaction is required.
What is the potential impact of successful exploitation?
Successful exploitation allows local elevation of privilege. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.