vulnerabilities present in Microsoft Office

Microsoft has identified vulnerabilities in various Office products. A malicious individual can exploit these vulnerabilities to impersonate another user or execute arbitrary code with the victim’s privileges, potentially accessing sensitive data within the context of the victim’s account. For...

CVE-2026-40364

CVE-2026-40364 affects Microsoft Word, where an error described as a type confusion in resource access can allow an unauthenticated attacker to trigger remote code execution via Word documents. The CVE is tracked with a high CVSS v3.1 score (8.4) and a local attack vector with no user interaction...

CVE-2026-40364 Microsoft Word Remote Code Execution Vulnerability

...