You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2026 26134
About this tag
CVE-2026-26134 is a Microsoft Office local privilege escalation vulnerability disclosed in Microsoft's March 10, 2026 security update. The issue is an integer overflow or wraparound that allows an authorized local user to elevate privileges on an affected system. Microsoft assigned this vulnerability a CVSS 3.1 score of 7.8, indicating high impact. Discussions on WindowsForum cover the technical details, affected Office versions, and mitigation steps for enterprise IT administrators and security professionals. The tag aggregates community analysis and practical guidance for defending against this elevation of privilege threat.
Microsoft’s March 10, 2026 security roll‑up added a sharp new item to defenders’ to‑do lists: CVE‑2026‑26134, a Microsoft Office vulnerability described by the vendor as an integer overflow or wraparound that can be leveraged by an authorized local user to achieve elevation of privilege, and...