Product:
Microsoft Office
Summary
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. This vulnerability can lead to significant security risks, including unauthorized access to sensitive information. It is crucial for users to be aware of this issue to protect their data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-21509 |
Exploitation
An attacker can exploit this vulnerability by providing untrusted inputs that the application does not properly validate. By doing so, the attacker can bypass security features that are meant to protect the application and its data. This exploitation requires local access to the system and user interaction to trigger the vulnerability.
Affected Products
- Microsoft Office: A widely used suite of productivity applications that may be vulnerable due to improper handling of untrusted inputs.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office and apply any available security updates. Additionally, users should be cautious about the inputs they provide to the application and avoid using untrusted sources.