Heap-based Buffer Overflow in Microsoft Office Affects Microsoft Products
CVE-2026-45645
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 June 2026
What is CVE-2026-45645?
A heap-based buffer overflow vulnerability exists in Microsoft Office, which can be exploited by an unauthorized attacker to execute arbitrary code on the host system. This vulnerability can potentially allow an attacker to gain access to sensitive information and perform actions without user consent. It is critical for users to apply the latest security updates to mitigate risks and protect their systems from possible exploitation. For more details and patch information, refer to Microsoft's advisory.
Affected Version(s)
Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1
Microsoft Office 2016 32-bit Systems 16.0.0 < 16.0.5556.1001
Microsoft Office 2019 32-bit Systems 19.0.0