access vulnerabilities and fixes

Recent CVEs affecting access, with upgrade or downgrade steps. 10 tracked.

access has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-09-08. Highest priority: CVE-2026-69778 (score 50/100).

• CVE-2026-64906 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-69778 HIGH 8.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n
• CVE-2026-69614 HIGH 8.8 MITIGATE DOWNGRADE Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a
• CVE-2026-69529 HIGH 8.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n
• CVE-2026-69477 HIGH 7.3 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
• CVE-2026-64920 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-64914 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-64919 HIGH 7.8 MITIGATE DOWNGRADE Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally
• CVE-2026-64912 HIGH 7.8 MITIGATE DOWNGRADE Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally
• CVE-2026-64908 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

FAQ

How do I fix access vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is access being exploited right now?

None of the tracked access CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which access CVE should I patch first?

CVE-2026-69778 currently ranks highest (50/100): Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n.

RSS feed for access · ← Back to latest CVEs