CVE-2026-42832

Published: May 12, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

Affected (4)

Products: Microsoft: Excel, Office, Office Long Term Servicing Channel, Word

4 products

Office Long Term Servicing Channel

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Before 16.0.19822.20190
Microsoft Office	Version 2024
Microsoft Office Long Term Servicing Channel	Version 2021
Microsoft Word	Before 16.0.19822.20190

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42832

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.