Product:
Microsoft Office Word
Summary
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality breaches. Users must be cautious about the files they share and the permissions granted.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-35440 |
Exploitation
An attacker can exploit this vulnerability by gaining access to files or directories that should be restricted. By leveraging local access, the attacker can disclose sensitive information without needing elevated privileges. User interaction is required, as the attacker must trick the user into opening a malicious file or directory.
Affected Products
- Microsoft Office Word: Vulnerable to unauthorized information disclosure due to accessible files or directories.
Mitigation
To mitigate this vulnerability, users should ensure that sensitive files and directories are not accessible to unauthorized parties. Regularly review and adjust permissions for shared files. Additionally, users should be cautious about opening files from untrusted sources.