CVE Catalog
CVE-2026-70314
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.48%
39th percentile - higher than 39% of all known CVEs
Summary
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
Risk Assessment
The risk is that an unauthorized user may gain local access to sensitive data, potentially leading to information disclosure.
Recommendation
It is recommended to update Microsoft Office to the latest version and implement access restrictions to files.
Original NVD description (English source)
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.