## Summary
CVE-2026-64919 describes a stack-based buffer overflow in Microsoft Office Access that can allow an unauthorized attacker to execute code locally. The issue is classified as high severity (CVSS 7.8) with a local attack vector and no required privileges.
## Technical Details
- Vulnerability type: Stack-based buffer overflow
- CWE: CWE-121
- Reported impact: confidentiality, integrity, and availability impact are all marked as high (C:H/I:H/A:H in the provided CVSS metrics).
- Attack vector (per provided metrics): AV:L (local), with user interaction UI:R.
## Affected
- Product: Microsoft Office Access
## Impact
- Potential outcomes include code execution locally by an unauthorized attacker.
- The CVSS vector indicates the attacker may achieve:
- Confidentiality impact: C:H
- Integrity impact: I:H
- Availability impact: A:H
## Mitigation
1. Apply Microsoft security updates/patches for Microsoft Office Access as soon as they are available for this CVE.
2. Reduce local exposure by limiting access to systems where Office Access is installed (e.g., restrict who can run Office applications).
3. Monitor for suspicious local activity around Office Access execution (e.g., unexpected child processes or anomalous behavior following user interaction).
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-121