CVE-2026-40364
HighSummary
In Microsoft Office Word, a vulnerability related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
Risk Assessment
This vulnerability could lead to unauthorized access to the system and execution of malicious code, posing a serious threat to organizational security.
Recommendation
It is recommended to update Microsoft Office Word to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Microsoft Office Word
See all- CVE-2026-97001High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-96996High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-96995High
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
- CVE-2026-88210High
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-88202High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The issue stems from improper memory handling during document processing.
- CVE-2026-88186High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-88185High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-88150High
A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-41101High
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
- CVE-2026-20948High
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS