CVE Catalog

CVE-2026-63518

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.36%

29th percentile - higher than 29% of all known CVEs

Summary

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Risk Assessment

An attacker could execute malicious code in the user's context, potentially leading to data confidentiality breaches.

Recommendation

Install the latest Microsoft Office Word security updates.

Original NVD description (English source)

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS