Heap-Based Buffer Overflow in Microsoft Office by Microsoft
CVE-2026-42831
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 12 May 2026
What is CVE-2026-42831?
A heap-based buffer overflow vulnerability exists in Microsoft Office that enables an unauthorized attacker to execute arbitrary code locally. This flaw could be exploited to compromise the system, allowing malicious actors to gain control and execute further malicious activities. Users are encouraged to apply the latest security updates to mitigate potential risks.
Affected Version(s)
Microsoft Office for Android 16.0.1 < 16.0.19822.20190
Microsoft Office LTSC for Mac 2021 16.0.1 < 16.109.26051019
Microsoft Office LTSC for Mac 2024 16.0.0 < 16.109.26051019