CVE-2026-47293 Details

A use-after-free vulnerability has been identified in Microsoft Office Click-To-Run, allowing an authorized attacker to locally elevate privileges. This vulnerability affects multiple Office products, including Microsoft Office LTSC 2024, Microsoft Office LTSC 2021, Microsoft 365 Apps for Enterprise, and Microsoft Office 2019, across both 32-bit and 64-bit editions.

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC 2024, 2021, and 2019, security updates are also available via the Office Update service. Instructions for downloading these security updates can be found on the Microsoft Office Update Guidance page.