CVE-2026-55032
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted documents.
Risk Assessment
An attacker can take control of the victim's system by opening a malicious Word file, leading to data theft, malware installation, or further privilege escalation.
Recommendation
Immediately apply the security update released by Microsoft for the Office suite. Restrict opening Word documents from untrusted sources and deploy exploit protection mechanisms.
Other vulnerabilities in Microsoft Office Word
See all- CVE-2026-41101High
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
- CVE-2026-40364High
In Microsoft Office Word, a vulnerability related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
- CVE-2026-20948High
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-20944High
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-70105Medium
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
- CVE-2026-70319Medium
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- CVE-2026-70311High
A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-70310Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- CVE-2026-66810Medium
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- CVE-2026-66806Medium
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Original NVD description (English source)
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.