Read the docs
Microsoft update

KB5002616

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority MEDIUM 40

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00703 Published 2025-06-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5504.1000 +2 CWE-843