CVE-2026-69477
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
Risk Assessment
An attacker could execute malicious code in the user context, potentially leading to data confidentiality breach or further privilege escalation.
Recommendation
Install the latest Microsoft Office security updates from the vendor.
Other vulnerabilities in Microsoft Office Access
See all- CVE-2026-94506Medium
An out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
- CVE-2026-105717High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105716High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105714High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105598High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105597High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105596High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105595High
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105593High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105592High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS