{"id":"CVE-2026-68880","aliases":[],"cve":{"records":[{"id":"CVE-2026-68880","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-31T20:06:14.674Z","published":"2026-09-08T17:14:44.196Z","modified":"2026-10-31T16:13:25.402Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-10-31T16:13:25.402Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-09T10:05:22.898Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68880","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-122","description":"CWE-122: Heap-based Buffer Overflow","source":"microsoft"},{"id":"CWE-197","description":"CWE-197: Numeric Truncation Error","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:*:*:android:*:*:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.0.20430.20000"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.112.26090911"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.112.26090911"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"16.112.26090911"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-09T04:18:43.649014Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Windows Win32k Elevation of Privilege Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.","score":8,"severity":"high","published":"2026-09-08T17:14:44.196Z","modified":"2026-10-31T16:13:25.402Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Microsoft Office 365 for Mac","platforms":[],"versions":[{"version":"1.0.0","status":"affected","lessThan":"16.112.26090911","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68880"},{"vendor":"Microsoft","name":"Microsoft Office for Android","platforms":[],"versions":[{"version":"16.0.1","status":"affected","lessThan":"16.0.20430.20000","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68880"},{"vendor":"Microsoft","name":"Microsoft Office LTSC for Mac 2021","platforms":[],"versions":[{"version":"16.0.1","status":"affected","lessThan":"16.112.26090911","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68880"},{"vendor":"Microsoft","name":"Microsoft Office LTSC for Mac 2024","platforms":[],"versions":[{"version":"16.0.0","status":"affected","lessThan":"16.112.26090911","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-68880"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68880"],"sources":[{"name":"CVE","id":"CVE-2026-68880","modified":"2026-10-31T16:13:25.402Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-68880"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":8}],"sourceAffected":[],"observedAt":"2026-10-31T16:22:48.303Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T16:25:31.632Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-31T14:20:31.706Z","attemptedAt":"2026-10-31T14:20:31.706Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-31T14:20:31.706Z","attemptedAt":"2026-10-31T14:20:31.706Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-31T14:20:31.706Z","attemptedAt":"2026-10-31T14:20:31.706Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-31T14:20:31.706Z","attemptedAt":"2026-10-31T14:20:31.706Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-68880","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68880","modified":"2026-10-30T22:17:06.633","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-31T14:20:31.706Z"},{"source":"ENISA EUVD","id":"EUVD-2026-73407","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-73407","modified":"Oct 30, 2026, 9:53:11 PM","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-10-31T14:20:31.706Z"},{"source":"FIRST EPSS","id":"CVE-2026-68880","url":"https://www.first.org/epss/","probability":0.00768,"percentile":0.55528,"date":"2026-10-30","checkedAt":"2026-10-31T14:20:31.706Z"},{"source":"GitHub Advisory Database","id":"GHSA-8m5p-242c-cv48","url":"https://github.com/advisories/GHSA-8m5p-242c-cv48","modified":"2026-09-08T18:32:22Z","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-31T14:20:31.706Z"}],"aiSummary":{"text":"A heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges. The vulnerability affects Microsoft Office 365 for Mac, Microsoft Office for Android, Microsoft Office LTSC for Mac 2021, and Microsoft Office LTSC for Mac 2024 with specific version ranges.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T02:46:13.828Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-68880"}]}}