V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2026-06750
BDU
High

Уязвимость технологии Click-to-Run (C2R) пакетов программ Microsoft Office и Office 365 связана с ошибками разграничения доступа. Эксплуата…

CVSS
8.8
High
EPSS
0.00
p0
Published
2026-01-01
Updated
2026-01-01
Description

Уязвимость технологии Click-to-Run (C2R) пакетов программ Microsoft Office и Office 365 связана с ошибками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Affected products
Microsoft corp Microsoft 365 apps for enterpriseMicrosoft corp Microsoft office 2019Microsoft corp Microsoft office ltsc 2021Microsoft corp Microsoft office ltsc 2024
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Timeline
2026-01-01
Published
2026-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: L
Low (L)
User Interaction
UI: N
None (N)
Scope
S: C
Changed (C)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Microsoft
Microsoft Office 2019Microsoft 365 Apps For EnterpriseMicrosoft Office Ltsc 2021Microsoft Office Ltsc 2024
ProductVendorStatus
microsoft 365 apps for enterprisemicrosoft corpTracked
microsoft office 2019microsoft corpTracked
microsoft office ltsc 2021microsoft corpTracked
microsoft office ltsc 2024microsoft corpTracked
Source databases
BDU
Related vulnerabilities
CVE-2026-40420