PT-2026-24335 · Microsoft · Office+1

Gábor Selján · Publicado 2026-03-10 · Atualizado 2026-03-16 · CVE-2026-26134

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified)

Description An integer overflow or wraparound exists in Microsoft Office, potentially allowing an authorized attacker to elevate privileges locally. The issue involves an integer overflow, which can lead to unexpected behavior and potentially allow an attacker to gain higher-level access within the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Integer Overflow

Enumeração de Fraquezas

CWE-416

CWE-190

Identificadores relacionados

BDU:2026-02866

CVE-2026-26134

Produtos afetados

Office

Office For Android

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-26134 · Nota de Segurança
• https://twitter.com/CVEnew/status/2033361128135246187 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-02866 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-26134 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26134 · Aviso do Fabricante