Skip to content
fr Sign in
8.4 High

CVE-2026-45456 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to…

Description

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected products and versions

Product Affected versions Fixed in
Microsoft 365 Apps for Enterprise 16.0 16.0.1 → latest No fix stated
Microsoft Office 2019 19.0 19.0.0 → latest No fix stated
Microsoft Office 365 for Mac 1.0 1.0.0 → < 16.110.26061317 16.110.26061317
Microsoft Office LTSC 2021 16.0 16.0.1 → latest No fix stated
Microsoft Office LTSC 2024 16.0 16.0.0 → latest No fix stated
Microsoft Office LTSC for Mac 2021 16.0 16.0.1 → < 16.110.26061317 16.110.26061317
Microsoft Office LTSC for Mac 2024 16.0 16.0.0 → < 16.110.26061317 16.110.26061317
Microsoft SharePoint Enterprise Server 2016 16.0 16.0.0 → < 16.0.5556.1005 16.0.5556.1005
Microsoft SharePoint Server 2019 16.0 16.0.0 → < 16.0.10417.20153 16.0.10417.20153
Show the 2 other branches
Product Affected versions Fixed in
Microsoft SharePoint Server Subscription Edition 16.0 16.0.0 → < 16.0.19725.20384 16.0.19725.20384
Microsoft Word 2016 16.0 16.0.1 → < 16.0.5556.1000 16.0.5556.1000

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft 365 Apps for Enterprise

The 931 CVEs of Microsoft 365 Apps for Enterprise →
CVE-2026-108454 Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network 6.5 Medium CVE-2026-108455 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network 6.5 Medium CVE-2026-108453 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network 6.5 Medium CVE-2026-108451 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High
Track this CVE