CVE-2026-40363

CVE-2026-40363 is a heap-based buffer overflow in Microsoft Office that allows an unauthenticated local attacker to execute code. The vulnerability affects Office components handling user data in local context and is rated high severity (CVSS 3.1: AV:L AC:L PR:N UI:N S:U C:H I:H A:H). A patch is ...

CVE-2026-40363

creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...