Product:
Microsoft Office Word
Summary
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. This vulnerability can lead to the exposure of sensitive information. Attackers can exploit this issue to gain access to data that should remain confidential.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.1 | CVE-2026-33822 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and require user interaction. By crafting a malicious document and convincing the user to open it, the attacker can trigger the out-of-bounds read, leading to the disclosure of sensitive information stored on the system.
Affected Products
- Microsoft Office Word: A widely used word processing application that may allow unauthorized information disclosure due to this vulnerability.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office Word and apply any available security updates. Additionally, users should be cautious when opening documents from untrusted sources to prevent exploitation.