CVE Catalog
CVE-2026-70317
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.46%
38th percentile - higher than 38% of all known CVEs
Summary
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
Risk Assessment
The risk is that an unauthorized user may gain local access to sensitive data, potentially leading to information disclosure.
Recommendation
It is recommended to update Microsoft Office to the latest version and implement access restrictions to files.
Original NVD description (English source)
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.