CVE Catalog

CVE-2026-66810

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Risk Assessment

An attacker could access sensitive data in Word's memory, potentially leading to information disclosure.

Recommendation

Install the latest security updates for Microsoft Office Word.

Original NVD description (English source)

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS