CVE-2026-85340
HighCVSS 7.8Summary
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit this flaw to gain higher privileges on the system, potentially leading to full machine compromise.
Recommendation
Immediately install the latest Microsoft security updates for Microsoft Office Click-To-Run.
Other vulnerabilities in Microsoft Office Click-To-Run
See all- CVE-2026-97774High
Time-of-check time-of-use (TOCTOU) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-88109High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-70276High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS