Product:
Microsoft Office Word
Summary
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. This vulnerability can lead to unauthorized actions being taken by the attacker, potentially compromising sensitive information. It is crucial for users to be aware of this issue to protect their data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-41101 |
Exploitation
To exploit this vulnerability, an attacker with local access to the system can manipulate the access controls within Microsoft Office Word. By doing so, they can perform spoofing attacks, which may allow them to impersonate other users or manipulate documents without proper authorization. This requires low privileges and does not necessitate user interaction, making it a significant risk.
Affected Products
- Microsoft Office Word: A widely used word processing application that is vulnerable to improper access control, allowing local spoofing attacks.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office Word and apply any available security updates. Additionally, restricting local access to sensitive systems and educating users about the risks of unauthorized access can help reduce the likelihood of exploitation.