CVE Catalog
CVE-2026-66806
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.53%
42th percentile - higher than 42% of all known CVEs
Summary
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Risk Assessment
The error could allow an attacker to read data beyond buffer boundaries, potentially leading to information disclosure.
Recommendation
Install the latest security updates for Microsoft Office Word.
Original NVD description (English source)
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.