← Database

CVE-2026-20948

HIGH CVSS: 7.8 Published: 2026-01-13 Modified: 2026-06-17

Description

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Affected Platforms

Microsoft 365 AppsMicrosoft Office Long Term Servicing ChannelMicrosoft WordMicrosoft Sharepoint ServerMicrosoft Office

Weakness Type

CWE-822

References