CVE-2026-35436

Published: Mag 12, 2026 Last Modified: Mag 12, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 8,8

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: changed

Confidentiality: high

Integrity: high

Availability: high

AI Translation Available

Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

1220

Incomplete

Abstraction: Base Structure: Simple

Security Scopes Affected:

Confidentiality Integrity Availability Access Control

Potential Impacts:

Modify Memory Read Memory Execute Unauthorized Code Or Commands Gain Privileges Or Assume Identity Bypass Protection Mechanism Other

All platforms may be affected

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35436