V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsDocs
←Back to catalog
BDU:2026-06751
BDU
High

Уязвимость технологии Click-to-Run (C2R) пакетов программ Microsoft Office и Microsoft 365 Apps for Enterprise связана с недостатками разгр…

CVSS
8.8
High
EPSS
0.00
p0
Published
2026-01-01
Updated
2026-01-01
Description

Уязвимость технологии Click-to-Run (C2R) пакетов программ Microsoft Office и Microsoft 365 Apps for Enterprise связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Affected products
Microsoft corp Microsoft 365 apps for enterpriseMicrosoft corp Microsoft office 2019Microsoft corp Microsoft office ltsc 2021Microsoft corp Microsoft office ltsc 2024
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Timeline
2026-01-01
Published
2026-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: L
Low (L)
User Interaction
UI: N
None (N)
Scope
S: C
Changed (C)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected software
ProductVendorStatus
microsoft 365 apps for enterprisemicrosoft corpTracked
microsoft office 2019microsoft corpTracked
microsoft office ltsc 2021microsoft corpTracked
microsoft office ltsc 2024microsoft corpTracked
Source databases
BDU
Related vulnerabilities
CVE-2026-35436