Product:
Microsoft Office
Summary
Access of resource using incompatible type type confusion in Microsoft Office allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this flaw without requiring any user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2026-26110 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging the type confusion issue, the attacker can manipulate the memory of the application to execute arbitrary code. This can be achieved by crafting a specific input that triggers the vulnerability, allowing the attacker to gain control over the application and potentially the entire system.
Affected Products
- Microsoft Office: A widely used suite of productivity applications that may be vulnerable to local code execution due to type confusion.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office with all security updates applied. Regularly checking for updates and applying patches can help protect against potential exploitation of this and other vulnerabilities.