CVE-2026-68880

HIGH

MEDIUM Priority: 0.06 BB Relevance: 56/100

Published: 2026-09-08 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Network Low Complexity Conf. Impact Integ. Impact

AV: Network

AC: Low

PR: Low

UI: Required

S: Unchanged

C: High

I: High

A: High

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Vendor	Product	Version
Microsoft	Microsoft Office 365 for Mac	1.0.0 < 16.112.26090911
Microsoft	Microsoft Office LTSC for Mac 2021	16.0.1 < 16.112.26090911
Microsoft	Microsoft Office LTSC for Mac 2024	16.0.0 < 16.112.26090911
Microsoft	Microsoft Office for Android	16.0.1 < 16.0.20430.20000
microsoft	windows_10_1607	< 10.0.14393.9512
microsoft	windows_10_1607	< 10.0.14393.9512
microsoft	windows_10_1809	< 10.0.17763.9245
microsoft	windows_10_1809	< 10.0.17763.9245
microsoft	windows_10_21h2	< 10.0.19044.7725
microsoft	windows_10_21h2	< 10.0.19044.7725
microsoft	windows_10_21h2	< 10.0.19044.7725
microsoft	windows_10_22h2	< 10.0.19045.7725
microsoft	windows_10_22h2	< 10.0.19045.7725
microsoft	windows_10_22h2	< 10.0.19045.7725
microsoft	windows_11_23h2	< 10.0.22631.7582
microsoft	windows_11_23h2	< 10.0.22631.7582
microsoft	windows_11_24h2	< 10.0.26100.9445
microsoft	windows_11_24h2	< 10.0.26100.9445
microsoft	windows_11_25h2	< 10.0.26200.9445
microsoft	windows_11_25h2	< 10.0.26200.9445
microsoft	windows_11_26h1	< 10.0.28000.2954
microsoft	windows_11_26h1	< 10.0.28000.2954
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	< 10.0.14393.9512
microsoft	windows_server_2019	< 10.0.17763.9245
microsoft	windows_server_2022	< 10.0.20348.5622
microsoft	windows_server_2025	< 10.0.26100.33438

vendor-advisory patch

56 / 100

✓ Network accessible
✓ Low complexity

8.0 / 10.0 v3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.77%

Raw Score 0.007680

Percentile 55.5%

Date 2026-10-30

mitre ref →

nvd ref →