PT-2026-40257 · Microsoft · Office

Published 2026-05-12 · Updated 2026-05-18 · CVE-2026-42832

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified)

Description Improper access control allows an unauthorized attacker to perform spoofing locally.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2026-06758

CVE-2026-42832

Affected Products

Office

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-42832 · Security Note
• https://bdu.fstec.ru/vul/2026-06758 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42832 · Vendor Advisory
• https://twitter.com/CVEnew/status/2054341005961212027 · Twitter Post
• https://twitter.com/rahsi_aaka/status/2054554342699769984 · Twitter Post
• https://twitter.com/cybrsecpath/status/2056221995650683145 · Twitter Post
• https://t.me/cveNotify/163718 · Telegram Post
• https://t.me/CVEtracker/53523 · Telegram Post