CVE-2026-45474 Details

A heap-based buffer overflow vulnerability has been identified in Microsoft Office. This vulnerability allows an unauthorized attacker to execute code locally. It affects multiple Office products, including Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office 2016, and various Office LTSC versions for both Windows and Mac. The vulnerability arises from a heap-based buffer overflow, which can be exploited to execute arbitrary code on the affected system.

Security updates for this vulnerability are available for Microsoft 365 Apps for Enterprise, Microsoft Office 2019, and Microsoft Office 2016. For Microsoft Office LTSC 2021 and 2024, as well as Microsoft Office for Android, the security updates will be released as soon as possible. Customers will be notified when these updates are available.