6.5
CVE-2026-69734
- EPSS 0.87%
- Veröffentlicht 08.09.2026 17:13:01
- Zuletzt bearbeitet 17.09.2026 20:17:48
- Erkennungen
Microsoft Office Word Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Microsoft 365 Version - SwPlatform macos
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x64
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x86
Microsoft ≫ Office 2019 Version - HwPlatform x64
Microsoft ≫ Office 2019 Version - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform macos HwPlatform -
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform macos HwPlatform -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.87% | 0.566 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734