CVE-2026-88109
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the vulnerability to escalate privileges, potentially leading to system and data compromise.
Recommendation
Update Microsoft Office to the latest version to remediate this vulnerability.
Other vulnerabilities in Microsoft Office Click-To-Run
See all- CVE-2026-97774High
Time-of-check time-of-use (TOCTOU) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-85340High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-70276High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS