CVE-2026-40420 | Microsoft Office 365 Apps/2019/LTSC 2021/LTSC 2024 access control

A vulnerability was found in Microsoft Office 2019/365 Apps/LTSC 2021/LTSC 2024 and classified as critical. This affects an unknown function. Such manipulation leads to improper access controls.

This vulnerability is documented as CVE-2026-40420. The attack needs to be performed locally. There is not any exploit available.

It is best practice to apply a patch to resolve this issue.