Heap-Based Buffer Overflow in Microsoft Office by Microsoft
CVE-2026-42831

7.8HIGH

What is CVE-2026-42831?

A heap-based buffer overflow vulnerability exists in Microsoft Office that enables an unauthorized attacker to execute arbitrary code locally. This flaw could be exploited to compromise the system, allowing malicious actors to gain control and execute further malicious activities. Users are encouraged to apply the latest security updates to mitigate potential risks.

Affected Version(s)

Microsoft Office for Android 16.0.1 < 16.0.19822.20190

Microsoft Office LTSC for Mac 2021 16.0.1 < 16.109.26051019

Microsoft Office LTSC for Mac 2024 16.0.0 < 16.109.26051019

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.