Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
References
| Link | Resource |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45456 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Jun 2026, 18:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x86:* cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:* cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:macos:-:* cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x86:* cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:* cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x64:* cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:* cpe:2.3:a:microsoft:office_2016:-:*:*:*:-:*:x64:* cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x86:* cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:* cpe:2.3:a:microsoft:office_2016:-:*:*:*:-:*:x86:* cpe:2.3:a:microsoft:microsoft_365:-:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:macos:-:* |
|
| First Time |
Microsoft office 2019
Microsoft office 2021 Microsoft office 2024 Microsoft office 2016 Microsoft sharepoint Server Microsoft microsoft 365 Microsoft Microsoft 365 Apps |
|
| References | () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45456 - Vendor Advisory |
09 Jun 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-09 17:17
Updated : 2026-06-11 18:40
NVD link : CVE-2026-45456
Mitre link : CVE-2026-45456
CVE.ORG link : CVE-2026-45456
JSON object : View
Products Affected
microsoft
- office_2016
- sharepoint_server
- 365_apps
- office_2021
- office_2019
- microsoft_365
- office_2024
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')