Product:
Microsoft Office Word
Summary
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant security risks, including unauthorized access to sensitive information and system control. It is crucial for users to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2026-20944 |
Exploitation
An attacker can exploit this vulnerability by executing a specially crafted document that triggers the out-of-bounds read condition. This can allow the attacker to run arbitrary code on the affected system. Since the attack vector is local, the attacker must have access to the system where the vulnerable version of Microsoft Office Word is installed.
Affected Products
- Microsoft Office Word: Vulnerable to out-of-bounds read, allowing unauthorized code execution.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office Word and apply any available security updates. Regularly checking for updates and following best security practices can help protect against potential exploits.