CVE-2026-45643
7.8 HIGHUntrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally
Published: 2026-06-09 · Last updated: 2026-06-09
Severity and scoring
- CVSS
- 7.8 HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CWE
- CWE-822
Description
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Source: NVD
References
Related CVEs
Same CWE
- CVE-2026-45645 — Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally (7.8 HIGH)
- CVE-2026-45471 — Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally (7.8 HIGH)
- CVE-2026-44805 — Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally (5.5 MEDIUM)
- CVE-2026-8835 — IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference (7.3 HIGH)
- CVE-2026-40369 — Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally (7.8 HIGH)