NetSight
high7.8

CVE-2026-50301

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Impact

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected products

VendorProductAffected versions
Microsoft365 Apps
All versions
MicrosoftOffice 2016
All versions
MicrosoftOffice 2019
All versions
MicrosoftOffice 2021
All versions
MicrosoftOffice 2024
All versions
MicrosoftMicrosoft 365 Apps For Enterprise
from 16.0.1 before https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2016
from 16.0.0 before 16.0.5561.1000
MicrosoftMicrosoft Office 2019
from 19.0.0 before https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021
from 16.0.1 before https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2024
from 16.0.0 before https://aka.ms/OfficeSecurityReleases

Weakness classification

References