CVE-2026-64909
365_apps: Integer Underflow (Wrap or Wraparound) (CVE-2026-64909)
Beschreibung
Metriken
Weakness-Klassen (CWE)
CWE-191Base
Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
cwe.mitre.org →CWE-125Base
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
cwe.mitre.org →CWE-122Variant
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
cwe.mitre.org →
Re-Analyse & Statuswechsel
Chronologie der NVD-Audit-Events für diese CVE — Reanalyses, CVSS-Updates, CPE-Diffs.
- CVE Modified2026-08-11 19:18 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
- SSVC: {"id":"CVE-2026-64909","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
- New CVE Received2026-08-11 17:18 UTC· secure@microsoft.com
- Affected: Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2019 (+5)
- Description: Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVSS V3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CWE: CWE-125
Betroffene Produkte
Aus der Hersteller-/CERT-Meldung extrahierte Produkte und Versionsbereiche. Ein Version-Range wie „<4.14.6“ impliziert die Update-Empfehlung „auf 4.14.6 oder höher aktualisieren“.
microsoft
365_apps
microsoft
microsoft_365
microsoft
office_2016
microsoft
office_2019
microsoft
office_2021
microsoft
office_2024