CVE Catalog

CVE-2026-66809

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Risk Assessment

An attacker could read data outside the intended memory area, potentially leading to information disclosure.

Recommendation

Install the latest security updates for Microsoft Office.

Original NVD description (English source)

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS