Fixes 6 records
Priority MEDIUM 46
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.04421 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-122
Priority LOW 39
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00453 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +4 CWE-822
Priority LOW 39
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00383 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-416
Priority LOW 39
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00605 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-416
Priority LOW 25
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00448 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 CWE-552
Priority LOW 21
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0062 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 CWE-73
THREATIST.IORead the docs