CVE record · 2 sources
CVE-2026-124185
CVSS 7.5Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- Vendor
- Microsoft
- Product
- Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024
- CVSS v3.1
- 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weakness
- CWE-908
- Exposure class
- Endpoint security, Collaboration
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for November 2026, which includes 1328 vulnerabilities affecting a range of products, including 60 that Microsoft marked as "critical." Out of 60 "critical" vulnerabilities, 45…
-
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.