Description
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Published: 2026-10-13
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: Local privilege escalation
Action: Immediate Patch
AI Analysis

Impact

The use-after-free flaw in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally and execute arbitrary code with higher rights.

Affected Systems

Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024 are affected. Any deployments of these products that use the Click-To-Run launch mode are vulnerable.

Risk and Exploitability

The CVSS score of 7 indicates a high severity risk, while the EPSS score is not available and the vulnerability is not in the CISA KEV catalog. An attacker must be authenticated and have local access to the target machine; the flaw can be triggered during normal use of Office applications and permits escalation to system privileges.

Generated by OpenCVE AI on October 14, 2026 at 03:10 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Microsoft Office update that fixes CVE-2026-70276.
  • Disable Click-To-Run or restrict its use for non-administrative users until the patch is applied.
  • Enforce least privilege by removing or limiting local administrative accounts to reduce escalation opportunities.

Generated by OpenCVE AI on October 14, 2026 at 03:10 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x64:*
cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x86:*
cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:*
cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x86:*

Tue, 13 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Description Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Title Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
First Time appeared Microsoft
Microsoft 365 Apps
Microsoft office 2021
Microsoft office 2024
Weaknesses CWE-416
CPEs cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*
cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*
Vendors & Products Microsoft
Microsoft 365 Apps
Microsoft office 2021
Microsoft office 2024
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft 365 Apps Office 2021 Office 2024
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-31T18:06:28.401Z

Reserved: 2026-08-03T23:56:34.120Z

Link: CVE-2026-70276

cve-icon Vulnrichment

Updated: 2026-10-13T20:44:48.091Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T19:19:46.873

Modified: 2026-10-15T17:30:55.110

Link: CVE-2026-70276

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-15T00:45:09Z

Weaknesses