Skip to content
Threat Feed

Product

Office Word

5 briefs RSS
medium advisory

CVE-2026-41101: Microsoft Office Word Improper Access Control Vulnerability Leading to Local Spoofing

CVE-2026-41101 is a vulnerability in Microsoft Office Word due to improper access control, which allows an authorized attacker to perform spoofing locally, with a CVSS v3.1 base score of 7.1.

Office Word cve spoofing office word
2r 1t 1c
high advisory

CVE-2026-40367: Microsoft Office Word Untrusted Pointer Dereference Vulnerability

CVE-2026-40367 is an untrusted pointer dereference vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally with a CVSS v3.1 base score of 8.4.

Office Word cve-2026-40367 office-word rce untrusted-pointer-dereference execution
2r 1t 1c
high advisory

CVE-2026-40366: Microsoft Office Word Use-After-Free Vulnerability

CVE-2026-40366 is a use-after-free vulnerability in Microsoft Office Word allowing local code execution by an unauthorized attacker.

Office Word use-after-free code-execution cve-2026-40366
2r 1t 1c
high advisory

CVE-2026-40364: Microsoft Office Word Type Confusion Vulnerability

Microsoft Office Word is vulnerable to CVE-2026-40364, a type confusion vulnerability that allows an unauthorized attacker to execute code locally.

Office Word cve-2026-40364 type confusion code execution msword
2r 1t 1c
high advisory

CVE-2026-40361: Microsoft Office Word Use-After-Free Vulnerability

CVE-2026-40361 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally.

Office Word cve-2026-40361 use-after-free code-execution office-word privilege-escalation
2r 2t 1c