CyberICT

CVE-2026-70323

Microsoft · Published August 11, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

Microsoft Office Information Disclosure Vulnerability. Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected Products

  • Microsoft Office 2019 for 32-bit editions
  • Microsoft Office 2019 for 64-bit editions
  • Microsoft Office LTSC 2024 for 32-bit editions
  • Microsoft Office LTSC 2021 for 64-bit editions

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C