CVE-2026-97774
HighCVSS 7.0Summary
Time-of-check time-of-use (TOCTOU) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with privileges could escalate privileges, potentially leading to full system compromise.
Recommendation
Install security updates for Microsoft Office Click-To-Run and monitor local user activities.
Other vulnerabilities in Microsoft Office Click-To-Run
See all- CVE-2026-88109High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-85340High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-70276High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS