Heap-based Buffer Overflow in Microsoft Office Affects Microsoft Products
CVE-2026-45645

7.8HIGH

What is CVE-2026-45645?

A heap-based buffer overflow vulnerability exists in Microsoft Office, which can be exploited by an unauthorized attacker to execute arbitrary code on the host system. This vulnerability can potentially allow an attacker to gain access to sensitive information and perform actions without user consent. It is critical for users to apply the latest security updates to mitigate risks and protect their systems from possible exploitation. For more details and patch information, refer to Microsoft's advisory.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 2016 32-bit Systems 16.0.0 < 16.0.5556.1001

Microsoft Office 2019 32-bit Systems 19.0.0

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.