PT-2026-24335 · Microsoft · Office+1

Gábor Selján · Published 2026-03-10 · Updated 2026-03-16 · CVE-2026-26134

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified)

Description An integer overflow or wraparound exists in Microsoft Office, potentially allowing an authorized attacker to elevate privileges locally. The issue involves an integer overflow, which can lead to unexpected behavior and potentially allow an attacker to gain higher-level access within the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Integer Overflow

Weakness Enumeration

CWE-416

CWE-190

Related Identifiers

BDU:2026-02866

CVE-2026-26134

Affected Products

Office

Office For Android

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-26134 · Security Note
• https://bdu.fstec.ru/vul/2026-02866 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26134 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26134 · Vendor Advisory
• https://twitter.com/CVEnew/status/2033361128135246187 · Twitter Post