CVE-2026

Back Api.Msrc.Microsoft

CVE-2026

Api.Msrc.Microsoft • February 10, 2026

Share: View original

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2026: Vulnerabilities in Microsoft Office Word and Excel Microsoft Office applications are affected by two vulnerabilities identified as CVE-2026. The first allows unauthorized attackers to bypass security features in Microsoft Word through untrusted inputs, while the second enables information disclosure in Microsoft Excel due to an out-of-bounds read. Both vulnerabilities pose risks to users operating these applications locally. 2 sources 12

Extracted Entities

Attack Types (1)

Zero-day Exploit

Platforms (1)

Microsoft Office Word