CVE-2026-96995
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · updated Oct 15, 2026 · microsoft 365 apps
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
Oct 15, 2026 · NIST NVD
Updated
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
Affected
- cpe microsoft/365 appsversion unspecified
- cpe microsoft/microsoft 365version unspecified
- cpe microsoft/office 2021version unspecified
- cpe microsoft/office 2024version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-96995
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-96995
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
nvd.nist.gov