Tracker / CVE-2026-40367
CVE-2026-40367
High 8.4
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected products and versions
| microsoft | 365_apps |
|---|---|
| microsoft | office |
| microsoft | office_long_term_servicing_channel |
| microsoft | sharepoint_server |
| microsoft | sharepoint_server · … → 16.0.19725.20280 |
| microsoft | word |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.