5.5

CVE-2026-66806

Medienbericht

Microsoft Office Word Information Disclosure Vulnerability

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ 365 Apps Version- SwEditionenterprise HwPlatformx64
Microsoft ≫ 365 Apps Version- SwEditionenterprise HwPlatformx86
Microsoft ≫ Office 2019 Version- HwPlatformx64
Microsoft ≫ Office 2019 Version- HwPlatformx86
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatform- HwPlatformx64
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatform- HwPlatformx86
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatform- HwPlatformx64
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatform- HwPlatformx86
Microsoft ≫ Word Version2016 HwPlatformx64
Microsoft ≫ Word Version2016 HwPlatformx86
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.347
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Microsoft 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-193 Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
11.08.2026 20:25
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66806
Vendor Advisory