Skip to content
Threat Feed
Subscribe

Tag

Word

3 briefs RSS
medium advisory

CVE-2026-41101: Microsoft Office Word Improper Access Control Vulnerability Leading to Local Spoofing

CVE-2026-41101 is a vulnerability in Microsoft Office Word due to improper access control, which allows an authorized attacker to perform spoofing locally, with a CVSS v3.1 base score of 7.1.

Office Word cve spoofing office word
2r 1t 1c
high threat

Microsoft Office Word Use-After-Free Vulnerability (CVE-2026-33095)

A use-after-free vulnerability in Microsoft Office Word (CVE-2026-33095) could allow a local attacker to execute arbitrary code by opening a specially crafted document.

exploited cve-2026-33095 use-after-free microsoft-office word code-execution
2r 1t 1c
high advisory

Malicious Word Document Targeting macOS Delivers Meterpreter

A malicious Word document targeting macOS users employs macros to download and execute a Meterpreter payload, leveraging a sandbox escape vulnerability and launch agent plist for persistence.

Office for Mac macos word macros meterpreter sandbox escape
2r 4t 2i