CVE-2025-27744 Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally

Description

Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Office 2016 16.0	16.0.0 → < 16.0.5495.1000	16.0.5495.1000

Other CVEs of Microsoft Office 2016

The 228 CVEs of Microsoft Office 2016 →

CVE-2026-62804 External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High CVE-2026-85875 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally 5.5 Medium CVE-2026-81948 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High CVE-2026-81950 Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High