Microsoft Word Security Feature Bypass Vulnerability

🗓️ 10 Feb 2026 16:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 13 Views

Microsoft Word security feature bypass vulnerability enables local attacker to bypass a security feature via untrusted inputs.

Reporter	Title	Published	Views	Family All 27
ATTACKERKB	CVE-2026-21514	10 Feb 202617:51	–	attackerkb
Information Security Automation	March "In the Trend of VM" (#25): once again, vulnerabilities are only in Microsoft products	22 Mar 202609:00	–	avleonov
Information Security Automation	February Microsoft Patch Tuesday	11 Feb 202611:08	–	avleonov
Information Security Automation	About Remote Code Execution – Microsoft Word (CVE-2026-21514) vulnerability	2 Mar 202622:04	–	avleonov
Circl	CVE-2026-21514	10 Feb 202617:30	–	circl
CISA KEV Catalog	Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability	10 Feb 202600:00	–	cisa_kev
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	10 Feb 202612:00	–	cisa
CNNVD	Microsoft Word 安全漏洞	10 Feb 202600:00	–	cnnvd
CVE	CVE-2026-21514	10 Feb 202617:51	–	cve
Cvelist	CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability	10 Feb 202617:51	–	cvelist

Vulners

Node

microsoft office_macos_2024Range<16.106.26020821ltsc

OR

microsoft office_2024Range<16.0.17932.20670ltscx64

OR

microsoft office_2024Range<16.0.17932.20670ltscx32

OR

microsoft office_2021Range<16.0.14334.20522ltscx32

OR

microsoft office_2021Range<16.0.14334.20522ltscx64

OR

microsoft office_macos_2021Range<16.106.26020821ltsc

OR

microsoft 365_appsRange<16.0.19628.20204current_channelenterprisex64

OR

microsoft 365_appsRange<16.0.19530.20226monthly_enterprise_channelenterprisex64

OR

microsoft 365_appsRange<16.0.19426.20294monthly_enterprise_channelenterprisex64

OR

microsoft 365_appsRange<16.0.19328.20306monthly_enterprise_channelenterprisex64

OR

microsoft 365_appsRange<16.0.19127.20532semi-annual_enterprise_channelenterprisex64

OR

microsoft 365_appsRange<16.0.18526.20714semi-annual_enterprise_channelenterprisex64

OR

microsoft 365_appsRange<16.0.17928.20776semi-annual_enterprise_channelenterprisex64

OR

microsoft 365_appsRange<16.0.19628.20204current_channelenterprisex32

OR

microsoft 365_appsRange<16.0.19530.20226monthly_enterprise_channelenterprisex32

OR

microsoft 365_appsRange<16.0.19426.20294monthly_enterprise_channelenterprisex32

OR

microsoft 365_appsRange<16.0.19328.20306monthly_enterprise_channelenterprisex32

OR

microsoft 365_appsRange<16.0.19127.20532semi-annual_enterprise_channelenterprisex32

OR

microsoft 365_appsRange<16.0.18526.20714semi-annual_enterprise_channelenterprisex32

OR

microsoft 365_appsRange<16.0.17928.20776semi-annual_enterprise_channelenterprisex32

10 Feb 2026 16:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.8

EPSS0.05386

SSVC

Microsoft Word security feature bypass local attacker untrusted inputs vulnerability