CVE-2026-70276
HighCVSS 7.0Summary
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to escalate privileges, potentially leading to system control.
Recommendation
Install the latest security updates for Microsoft Office.
Other vulnerabilities in Microsoft Office Click-To-Run
See all- CVE-2026-97774High
Time-of-check time-of-use (TOCTOU) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-88109High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-85340High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS