Integer overflow in Microsoft products - CVE-2026-69734

Vulnerability details

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to integer overflow or wraparound in Microsoft Office Word when processing input. A remote attacker can supply input that triggers the integer overflow to disclose sensitive information.

User interaction is required. The Preview Pane is not an attack vector.

Affected software

How to mitigate CVE-2026-69734

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-69734
• https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Office