The vulnerability of the Microsoft Office suite arises from the use of unreliable input data during security decision-making, allowing attackers to bypass existing security mechanisms.

🗓️ 27 Jan 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Microsoft Office vulnerabilities stem from unreliable input data in security decisions, enabling attackers to bypass security mechanisms.

Reporter	Title	Published	Views	Family All 47
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202609:26	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202613:56	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft	30 Jun 202616:19	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft	4 Feb 202614:13	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft	29 Jan 202600:51	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft	31 Jan 202604:52	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft	12 Mar 202618:59	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft	1 Feb 202617:31	–	githubexploit
GithubExploit	cve-2026-poc-collection	21 May 202615:15	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft	1 Mar 202617:00	–	githubexploit

Vulners

Node

microsoft microsoft_office_2016Range<16.0.5539.1001

OR

microsoft microsoft_office_2019Range<16.0.10417.20095

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
thehackernews	www.thehackernews.com/2026/01/microsoft-issues-emergency-patch-for.html
web	www.web.nvd.nist.gov/view/vuln/detail

28 Jan 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 27.2

CVSS 37.8

EPSS0.72152

Microsoft Office unreliable input data security decisions bypass security mechanisms