Microsoft disclosed CVE-2026-40420 on May 12, 2026, as an Important-rated elevation-of-privilege vulnerability in Microsoft Office Click-To-Run affecting Microsoft 365 Apps for Enterprise and supported Office 2019, Office LTSC 2021, and Office LTSC 2024 installations. The bug is not a...