CVE-2026-80088
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.
Risk Assessment
Risk of disclosing data from Word process memory, potentially including confidential content.
Recommendation
Install security updates for Microsoft Office Word.
Other vulnerabilities in Microsoft Office Word
See all- CVE-2026-41101High
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
- CVE-2026-40364High
In Microsoft Office Word, a vulnerability related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
- CVE-2026-20948High
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-20944High
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-83951Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- CVE-2026-83949Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- CVE-2026-81952High
Heap-based buffer overflow in Microsoft Office Word. Allows an unauthorized attacker to execute code over a network.
- CVE-2026-80090Medium
Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.
- CVE-2026-80085High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-80080High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS