Product:
Microsoft Office Word
Summary
Access of resource using incompatible type type confusion in Microsoft Office Word allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant security risks, including unauthorized access and control over the affected system. It is crucial for users to be aware of this issue to protect their data and systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2026-40364 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging the type confusion flaw, the attacker can manipulate the way resources are accessed, potentially leading to arbitrary code execution. This can be achieved through specially crafted documents or files that trigger the vulnerability when opened in Microsoft Office Word.
Affected Products
- Microsoft Office Word: A widely used word processing application that is vulnerable to type confusion, allowing unauthorized code execution.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office Word and apply any available security updates. Additionally, users should avoid opening untrusted documents or files that may exploit this vulnerability. Regular security practices, such as using antivirus software and maintaining system security, are also recommended.