CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2026-40367

CVE-2026-40367 describes an Untrusted pointer dereference in Microsoft Word that enables local code execution. Based on the provided documents, the affected product is Microsoft Word (Office). The vulnerability allows an attacker to execute code locally without user interaction, as indicated by t...

CVE-2026-40367

creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...

Description of the security update for SharePoint Server 2016 Language Pack: May 12, 2026 (KB5002869)

Description of the security update for SharePoint Server 2016 Language Pack: May 12, 2026 KB5002869 Applies To SharePoint Server 2016 Summary Important If you're running Microsoft SharePoint Server 2013-type workflows, you must install the August 2025 update for SharePoint Workflow Manager to you...

Description of the security update for SharePoint Server 2019 Language Pack: May 12, 2026 (KB5002872)

Description of the security update for SharePoint Server 2019 Language Pack: May 12, 2026 KB5002872 Applies To SharePoint Server 2019 Summary Important If you're running 2013-type workflows, you must install the August 2025 update for SharePoint Workflow Manager to your farm before you install th...

Security Updates for Microsoft SharePoint Server 2019 (May 2026)

The Microsoft SharePoint 2019 Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution CVE-2026-33112, CVE-2026-33110, CVE-2026-35439, CVE-2026-40357, CVE-2026-40365, CVE-2026-40367, CVE-2026-40368,...

CVE-2021-40367

creationtimestamp| type| source ---|---|--- 2024-01-04 13:21:40+00:00| seen| https://t.me/ctinow/162974 2024-01-05 01:32:55+00:00| seen| https://t.me/cibsecurity/74402 2024-01-07 06:57:13+00:00| seen| https://t.me/arpsyndicate/2619 2024-01-24 08:41:39+00:00| seen| https://t.me/ctinow/172579...

CVE-2021-40367

CVE-2021-40367 – Siemens syngo fastView : The vulnerability affects all versions of syngo fastView. It stems from improper validation of user-supplied data while parsing DICOM files, causing an out-of-bounds write past the end of an allocated structure. This could allow an attacker to execute cod...

CVE-2023-40367

CVE-2023-40367 affects IBM QRadar SIEM 7.5.0. The vulnerability is a cross-site scripting (XSS) flaw in the Web UI that allows an attacker to embed arbitrary JavaScript, potentially altering UI behavior and leading to credentials disclosure within a trusted session. Remediation provided in the co...