[CVE-2026-45474] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Descripción técnica

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Puntuación CVSS

Score: 8.4/10 — Severidad: HIGH — Estado NIST: Modified

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

365 apps, 365 copilot, Microsoft 365, Office 2016, Office 2019 — Microsoft

Debilidades (CWE)

CWE-416, CWE-787

Fuente oficial

Publicado en NIST NVD.