CVE-2026-40367

CVE-2026-40367 describes an Untrusted pointer dereference in Microsoft Word that enables local code execution. Based on the provided documents, the affected product is Microsoft Word (Office). The vulnerability allows an attacker to execute code locally without user interaction, as indicated by t...