cve-2026-47293

CVE-2026-47293 is a high-severity elevation-of-privilege vulnerability in Microsoft Office Click-to-Run, disclosed on June 9, 2026, as part of Patch Tuesday. It affects Office 2019 and stems from a use-after-free flaw that allows an authorized local attacker to gain elevated privileges. Discussions on WindowsForum highlight that beyond the bug itself, the vulnerability raises concerns about Microsoft's servicing infrastructure becoming part of the attack surface. For administrators, CVE-2026-47293 turns routine Patch Tuesday updates into a question of trust in the update mechanisms underlying Microsoft 365 and perpetual Office editions.