CVE-2026-69477
Microsoft · Published September 8, 2026
7.3
CVSS v3.1
HIGHPatch availableGet patch
Description
Microsoft Office Access Remote Code Execution Vulnerability. Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
Affected Products
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C