Product:
Microsoft Office
Summary
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. This vulnerability can lead to significant security risks, including unauthorized access to sensitive information. Attackers can exploit this flaw without needing any special privileges or user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.7 | CVE-2026-42832 |
Exploitation
To exploit this vulnerability, an attacker must have local access to a system running Microsoft Office. By manipulating the access controls, the attacker can perform spoofing attacks, potentially gaining unauthorized access to sensitive data or executing malicious actions within the application.
Affected Products
- Microsoft Office: Vulnerable to local spoofing attacks due to improper access control.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office and apply any available security updates. Additionally, restricting local access to systems running Microsoft Office can help prevent unauthorized exploitation of this flaw.