← Database

CVE-2026-40366

HIGH CVSS: 8.4 Published: 2026-05-12 Modified: 2026-06-17

Description

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Affected Platforms

Microsoft Office Long Term Servicing ChannelMicrosoft 365 AppsMicrosoft OfficeMicrosoft Word

Weakness Type

CWE-416

References