CVE Catalog
CVE-2026-70311
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.31%
24th percentile - higher than 24% of all known CVEs
Summary
A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Risk Assessment
An attacker can execute arbitrary code in the user's context, potentially leading to system compromise or data theft.
Recommendation
Update Microsoft Office Word to the latest version containing the security fix.
Original NVD description (English source)
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.