CVE-2026-108435
CVE-2026-108435 · Microsoft Office Word Information Disclosure Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 6.5 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
microsoft 365 apps for enterprise
- Versions
- ≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases: Affected (custom)
No fix published
microsoft office 365 for mac
- Versions
- ≥ 1.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc 2021
- Versions
- ≥ 16.0.1, < 16.0.14334.20974: Affected (custom)
Update to 16.0.14334.20974
microsoft office ltsc 2024
- Versions
- ≥ 16.0.0, < 16.0.17932.21056: Affected (custom)
Update to 16.0.17932.21056
microsoft office ltsc for mac 2021
- Versions
- ≥ 16.0.1, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc for mac 2024
- Versions
- ≥ 16.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123