CVE-2026-102867
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: secure@microsoft.com (Secondary)
Description
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Affected (6)
Products: Microsoft: 365 Apps, Office 2021, Office 2024
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions | |
| All versions |
Related CWEs
CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-20
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
References (1)
Source: secure@microsoft.com
Vendor Advisory
Timeline
No history available yet.