high7.8
CVE-2026-96997
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
Impact
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Microsoft Office LTSC For Mac 2024 | from 16.0.0 before 16.114.26101123 |
| Microsoft | Microsoft Office LTSC For Mac 2021 | from 16.0.1 before 16.114.26101123 |
| Microsoft | Microsoft Office LTSC 2021 | from 16.0.1 before 16.0.14334.20974 |
| Microsoft | Microsoft Office 365 For Mac | from 1.0.0 before 16.114.26101123 |
| Microsoft | Microsoft Office LTSC 2024 | from 16.0.0 before 16.0.17932.21056 |
| Microsoft | Microsoft 365 Apps For Enterprise | from 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| Microsoft | 365 Apps | All versions |
| Microsoft | Microsoft 365 | All versions |
| Microsoft | Office 2021 | All versions |
| Microsoft | Office 2024 | All versions |