Out-of-Bounds Read Vulnerability in Windows Win32K by Microsoft
CVE-2026-69609

5.5MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Office 365 For Mac
Microsoft Office For Android
Microsoft Office Ltsc For Mac 2021
Microsoft Office Ltsc For Mac 2024
Vendor
CVE Published:
8 September 2026

What is CVE-2026-69609?

An out-of-bounds read vulnerability in Windows Win32K could allow an authorized attacker to disclose sensitive information locally. By exploiting this flaw, attackers can potentially access data that is not intended to be available, posing a significant risk to the confidentiality of the system's information. It is recommended to apply the necessary patches and updates provided by Microsoft to mitigate this issue.

Affected Version(s)

Microsoft Office 365 for Mac 1.0.0 < 16.112.26090911

Microsoft Office for Android 16.0.1 < 16.0.20430.20000

Microsoft Office LTSC for Mac 2021 16.0.1 < 16.112.26090911

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.