Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
Microsoft · Office
Date added (CISA)
2026-02-10
Remediation due
2026-03-03
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.