← Database

CVE-2026-55124

MEDIUM CVSS: 5.5 Published: 2026-07-14 Modified: 2026-07-16

Description

Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected Platforms

Microsoft 365 AppsMicrosoft Office Online ServerMicrosoft Sharepoint ServerMicrosoft WordMicrosoft Microsoft 365Microsoft Office 2021Microsoft Office 2024Microsoft Office 2019

Weakness Type

CWE-20, CWE-1287

References