CVE record · 2 sources
CVE-2026-108438
CVSS 6.5Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
- Vendor
- Microsoft
- Product
- office
- CVSS
- 6.5
- Exposure class
- Collaboration
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-108438 Microsoft Office Word Information Disclosure Vulnerability
Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have…