High · published February 10, 2026
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 75.4th percentile for exploit probability.
⚡ An unauthorized attacker can bypass security features in Microsoft Word just by using untrusted inputs — like letting someone pick the locks on your office without a key! 🔓 Imagine your office has a visitor log, but anyone can waltz in and sign in as someone else — that’s what this vulnerability allows! It’s like allowing a fox to guard the henhouse without checking who it really is. This vulnerability could lead to unauthorized access and modifications of sensitive documents, putting your critical data at risk. An attacker could easily exploit these weaknesses, leading to potential data breaches or malicious alterations in your documents.
Imagine your office has a visitor log, but anyone can waltz in and sign in as someone else — that’s what this vulnerability allows! It’s like allowing a fox to guard the henhouse without checking who it really is. This flaw in Microsoft Word relies on untrusted inputs in security decisions, enabling local attackers to bypass essential security features meant to protect your files from tampering or unauthorized access.
This vulnerability could lead to unauthorized access and modifications of sensitive documents, putting your critical data at risk. An attacker could easily exploit these weaknesses, leading to potential data breaches or malicious alterations in your documents. Update Microsoft Office to the latest version immediately to close this vulnerability. Implement strict input validation practices and consider restricting access to sensitive documents. Regularly review and audit your security policies to ensure they remain robust. You've got this! Follow these steps and you'll be well on your way to shoring up your defenses! 🛡️