← Database
CVE-2026-40367
HIGH
CVSS: 8.4
Published: 2026-05-12
Modified: 2026-06-17
Description
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected Platforms
Microsoft 365 AppsMicrosoft Office Long Term Servicing ChannelMicrosoft WordMicrosoft Sharepoint ServerMicrosoft Office