CVE Catalog

CVE-2026-64899

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

28th percentile - higher than 28% of all known CVEs

Summary

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

Risk Assessment

The risk involves the potential disclosure of sensitive data stored locally, which could compromise the confidentiality of organizational information.

Recommendation

It is recommended to apply Microsoft Office security updates and restrict access to systems running affected applications.

Original NVD description (English source)

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS