high7.8
CVE-2025-26642
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Impact
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Access | Version 2016 |
| Microsoft | Excel | Version 2016 |
| Microsoft | Office | Versions 2016, 2019 |
| Microsoft | Office Long Term Servicing Channel | Versions 2021, 2024 |
| Microsoft | Office Online Server | All versions |
| Microsoft | Sharepoint Server | Version 2019 |