What is the CVSS score of CVE-2026-68792?

CVE-2026-68792 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Which versions of Microsoft Office are affected by CVE-2026-68792?

Microsoft Office contains a local privilege escalation vulnerability (CVE-2026-68792, CVSS 7.8) that allows authenticated users with standard-level privileges to escalate to higher system privileges…

How to fix or mitigate CVE-2026-68792?

Within 24 hours, inventory all Microsoft Office deployments and identify systems where standard user accounts have local access. Within 7 days, implement application execution policies (Windows AppLocker or equivalent) to prevent Office from spawning command-line interpreters (cmd.exe, powershell.exe), enable audit logging for Office child process creation and privilege escalation attempts, and review user account privilege assignments to minimize unnecessary local access. Within 30 days, monitor Microsoft Security Updates for patch availability and establish a 24-hour deployment plan; apply the patch immediately upon vendor release.

Microsoft Office CVE-2026-68792

EUVD-2026-56451 HIGH

Command Injection (CWE-77)

2026-08-11 secure@microsoft.com

GHSA-q6gv-265p-p9fg

Command Injection Microsoft 365 Apps Office 2019 Office 2021 Office 2024

7.8

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local vector confirmed by description; PR:L because a standard user account suffices; full C/I/A impact reflects privilege escalation to full system control.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 18:11 vuln.today

CVE Published

Aug 11, 2026 - 17:19 nvd

HIGH 7.8

DescriptionCVE.org

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.

AnalysisAI

Local privilege escalation in Microsoft Office exploits a command injection flaw (CWE-77) that allows an authenticated local attacker to gain elevated privileges on the affected system. The vulnerability requires only low-level privileges to trigger, making it accessible to any standard user account on a compromised or shared system. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate as low-privilege local user

Delivery

Trigger vulnerable Office command-handling feature

Exploit

Inject malicious shell metacharacters

Execution

Command executes with elevated privileges

Impact

Attain SYSTEM or Administrator access on host

Access

Authenticate as low-privilege local user

Delivery

Trigger vulnerable Office command-handling feature

Exploit

Inject malicious shell metacharacters

Execution

Command executes with elevated privileges

Impact

Attain SYSTEM or Administrator access on host

Vulnerability AssessmentAI

Exploitation	Exploitation requires a local authenticated user account with at least standard (low) privilege level - no special roles or administrative rights are needed to trigger the vulnerability. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) scores 7.8 (High), reflecting that while the attack is local, it requires minimal complexity and only low-level privileges - meaning any standard user account suffices. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A standard low-privilege user on a Windows system opens or interacts with a crafted Office document or triggers a specific Office feature that passes unsanitized input to a system command. The injected command executes with elevated privileges, granting the attacker SYSTEM or Administrator-level access on the local machine. …
Remediation	The primary remediation is to apply the patch released by Microsoft via the Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68792. … Detailed patch versions, workarounds, and compensating controls in full report.