CVE-2026-97774

Published: Ott 13, 2026 Last Modified: Ott 13, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,0

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

AI Translation Available

Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

367

Incomplete

Abstraction: Base Structure: Simple

Security Scopes Affected:

Integrity Other Non-Repudiation

Potential Impacts:

Alter Execution Logic Unexpected State Modify Application Data Modify Files Or Directories Modify Memory Other Hide Activities

All platforms may be affected

Likelihood of Exploit: Medium

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97774