Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2026-85340: Microsoft Office Click-To-Run can let local attacker gain admin rights
CVE-2026-85340 · published 22 days ago
Summary
The Click-To-Run component in Microsoft 365 Apps for Enterprise, Office LTSC 2021 and Office LTSC 2024 has a coding error that could be exploited by someone with access to a computer. If exploited, the attacker could increase their level of access and perform actions that normally require administrator privileges. Install the latest security updates from Microsoft as soon as they are available to protect your systems.
What to do
- Update microsoft microsoft office ltsc 2021 to version 16.0.14334.20974 or later.
- Update microsoft microsoft office ltsc 2024 to version 16.0.17932.21056 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | microsoft 365 apps for enterprise | 16.0.1 |
| microsoft | microsoft office ltsc 2021 | < 16.0.14334.20974 |
| microsoft | microsoft office ltsc 2024 | < 16.0.17932.21056 |
| microsoft | 365_apps |
All versions
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:* |
| microsoft | office_2021 |
All versions
cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x64:* |
| microsoft | office_2024 |
All versions
cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:* |
Original advisory text
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85340 vendor-advisory patch
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-416Use After Free
Timeline
Published13 Oct 2026
Updated4 Nov 2026
First seen13 Oct 2026
Track software like this
Free during beta