Dashboard / CVE-2026-55026

CVE-2026-55026

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 47/100
Published: 2026-07-14 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: None
A: None

Description

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

Weakness Classification (1)

Affected Software (38)

VendorProductVersion
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office 2016 16.0.0 < 16.0.5561.1000
Microsoft Microsoft Office 2016 16.0.0 < 16.0.5561.1000
Microsoft Microsoft Office 2019 19.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office 2019 19.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office 365 for Mac 1.0.0 < 16.111.26071215
Microsoft Microsoft Office 365 for Mac 1.0.0 < 16.111.26071215
Microsoft Microsoft Office LTSC 2021 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC 2021 16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC 2024 16.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC 2024 16.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office LTSC for Mac 2021 16.0.1 < 16.111.26071215
Microsoft Microsoft Office LTSC for Mac 2021 16.0.1 < 16.111.26071215
Microsoft Microsoft Office LTSC for Mac 2024 16.0.0 < 16.111.26071215
Microsoft Microsoft Office LTSC for Mac 2024 16.0.0 < 16.111.26071215
Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 < 16.0.5561.1001
Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 < 16.0.5561.1001
Microsoft Microsoft SharePoint Server 2019 16.0.0 < 16.0.10417.20175
Microsoft Microsoft SharePoint Server 2019 16.0.0 < 16.0.10417.20175
Microsoft Microsoft SharePoint Server Subscription Edition 16.0.0 < 16.0.19725.20434
Microsoft Microsoft SharePoint Server Subscription Edition 16.0.0 < 16.0.19725.20434
microsoft 365_apps -
microsoft 365_apps -
microsoft microsoft_365 -
microsoft office_2016 -
microsoft office_2016 -
microsoft office_2019 -
microsoft office_2019 -
microsoft office_2021 -
Showing 30 of 38 entries

References & Advisories (1)

Bug Bounty Relevance

47 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.2 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.45%
Raw Score 0.004490
Percentile 39.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00449
2026-10-28
0.00449

Intelligence Sources

mitre ref →

External Links