Integer Overflow Vulnerability in Windows Imaging Component by Microsoft
CVE-2026-69499

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Office 365 For Mac
Microsoft Office For Android
Microsoft Office Ltsc For Mac 2021
Microsoft Office Ltsc For Mac 2024
Vendor
CVE Published:
8 September 2026

What is CVE-2026-69499?

An integer overflow or wraparound vulnerability exists in the Windows Imaging Component that could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability poses a significant risk as it enables attackers to exploit flaws in the software, potentially compromising sensitive data and system integrity. It is essential to apply the recommended security updates to mitigate potential threats.

Affected Version(s)

Microsoft Office 365 for Mac 1.0.0 < 16.112.26090911

Microsoft Office for Android 16.0.1 < 16.0.20430.20000

Microsoft Office LTSC for Mac 2021 16.0.1 < 16.112.26090911

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.