← Database

CVE-2026-40420

HIGH CVSS: 8.8 Published: 2026-05-12 Modified: 2026-06-17

Description

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Affected Platforms

Microsoft Office Long Term Servicing ChannelMicrosoft 365 AppsMicrosoft Office

Weakness Type

CWE-284

References