Skip to content
OpenAdvisories
High · 7.5 CVE-2026-109498 EUVD-2026-122143GHSA-xwc8-hhg6-j42f

Microsoft Office Access Remote Code Execution Vulnerability

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by microsoft

Description

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 – < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC 2021 16.0.1 – < 16.0.14334.21048 16.0.14334.21048
Microsoft Microsoft Office LTSC 2024 16.0.0 – < 16.0.17932.21140 16.0.17932.21140

Advisories 2

References