CVE-2026-88109
CVE-2026-88109 · Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVSS 7.8 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
microsoft 365 apps for enterprise
- Versions
- ≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases: Affected (custom)
No fix published
microsoft office ltsc 2021
- Versions
- ≥ 16.0.1, < 16.0.14334.20974: Affected (custom)
Update to 16.0.14334.20974
microsoft office ltsc 2024
- Versions
- ≥ 16.0.0, < 16.0.17932.21056: Affected (custom)
Update to 16.0.17932.21056