cve-2026-45461

  1. CVE-2026-45461 Office RCE: Why AV:L Still Means Remote-Style Risk

    Microsoft disclosed CVE-2026-45461 on June 9, 2026 as a Critical Microsoft Office remote code execution vulnerability, even though its CVSS vector lists the attack vector as local because exploitation depends on code being run on the victim’s machine. That wording is not a contradiction so much...