CVE-2026-85881: Microsoft Office Graphics Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Microsoft Office Graphics Elevation of Privilege Vulnerability
Other sources
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
1 affected componentFixes available
Microsoft Office for Android<16.0.20430.20000
16.0.20430.20000
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20430.20000
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Frequently Asked Questions
1
Does exploitation require an attacker to already have access or involve a user action?
The provided vector indicates low privileges are required and user interaction is required. The description also characterizes the attacker as authorized and able to act over a network.
2
Which product is identified as affected?
The affected software listed is Microsoft Office for Android from Microsoft.