CVE-2026-64903
365_apps: Integer Overflow or Wraparound (CVE-2026-64903)
Beschreibung
Metriken
Weakness-Klassen (CWE)
CWE-190Base
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
cwe.mitre.org →CWE-122Variant
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
cwe.mitre.org →
Re-Analyse & Statuswechsel
Chronologie der NVD-Audit-Events für diese CVE — Reanalyses, CVSS-Updates, CPE-Diffs.
- New CVE Received2026-08-11 17:18 UTC· secure@microsoft.com
- Affected: Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2019 (+5)
- Description: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVSS V3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CWE: CWE-190
Betroffene Produkte
Aus der Hersteller-/CERT-Meldung extrahierte Produkte und Versionsbereiche. Ein Version-Range wie „<4.14.6“ impliziert die Update-Empfehlung „auf 4.14.6 oder höher aktualisieren“.
microsoft
365_apps
microsoft
microsoft_365
microsoft
office_2016
microsoft
office_2019
microsoft
office_2021
microsoft
office_2024