CVE-2026-45471
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - secure@microsoft.com
- Published
- 2026-06-09
- Last modified
- 2026-09-24
- Weaknesses
- CWE-822
Affected products
- 365 Apps (Microsoft)
- Microsoft 365 (Microsoft)
- Office 2019 (Microsoft)
- Office 2021 (Microsoft)
- Office 2024 (Microsoft)
- Office 365 (Microsoft)
- Office Macos 2021 (Microsoft)
- Office Macos 2024 (Microsoft)
- Sharepoint Server (Microsoft)
- Sharepoint Server 2016 (Microsoft)
- Sharepoint Server 2019 (Microsoft)
- Word (Microsoft)
- Word 2016 (Microsoft)
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45471
