CVE-2025-26630 Details

A use-after-free vulnerability has been identified in Microsoft Office Access. This vulnerability allows an unauthorized attacker to execute code locally. It affects several different versions and editions of Microsoft Office Access, including the 2016 32-bit and 64-bit editions, as well as the Office LTSC 2024 and 2021 versions for both 32-bit and 64-bit systems. Additionally, Microsoft 365 Apps for Enterprise in both 32-bit and 64-bit systems are affected. The vulnerability arises from a use-after-free memory error, which can be exploited by convincing a user to open a malicious file.

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog for Office 2016 users, and via the Click-to-Run service for Microsoft 365 Apps for Enterprise, Office LTSC 2024, Office LTSC 2021, and Office 2019 users.