Vulnerability · NVD
CVE-2026-26134
CVE-2026-26134, rated high by the vendor: 1 tracked app concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- 7.8
- Exploitation
- 0.4 %
- Tracked apps
- 1
- Still exposed
- 0
Base CVSS ; severity is a vendor rating (different scale)
EPSS, predicted over 30 days
Vendor bulletin scale : NVD CVSS pending
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
Attack vector : Local
No user interaction
Show raw CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.38%
exploit very unlikely
percentile 32.0%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
Observed affected builds (23)
16.0.19725.20104 16.0.19725.20046 16.0.19628.20148 16.0.19628.20082 16.0.19530.20070 16.0.19426.20152 16.0.19426.20100 16.0.19231.20064 16.0.19029.20122 16.0.19029.20080 16.0.18730.20068 16.0.18526.20058 16.0.18429.20130 16.0.18324.20132 16.0.18227.20088 16.0.18025.20078 16.0.17928.20046 16.0.17830.20080 16.0.16731.20178 16.0.16327.20282 16.0.16026.20172 16.0.15726.20196 16.0.15427.20096
Vulnerable CPE configurations (1)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| microsoft |
office Android
|
Android | <16.0.19822.20000 | cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.