CVE-2026-69477
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
Risk Assessment
An attacker could execute malicious code in the user context, potentially leading to data confidentiality breach or further privilege escalation.
Recommendation
Install the latest Microsoft Office security updates from the vendor.
Other vulnerabilities in Microsoft Office Access
See all- CVE-2026-69778High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-69614High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-69529High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-64920High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- CVE-2026-64919High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- CVE-2026-64914High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- CVE-2026-64912High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- CVE-2026-64908High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- CVE-2026-64906High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS