Product:
Microsoft Office
Summary
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this flaw without requiring any user interaction or elevated privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2026-26113 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging the untrusted pointer dereference, the attacker can execute arbitrary code with the same privileges as the user running Microsoft Office. This can lead to unauthorized access to sensitive data or system control.
Affected Products
- Microsoft Office: A suite of productivity applications that may be vulnerable to local code execution due to untrusted pointer dereference.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office with all security updates applied. Additionally, restricting local access to systems and monitoring for unusual activity can help reduce the risk of exploitation.