EUVD-2026-22631Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
6DescriptionCVE.org
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
AnalysisAI
Microsoft Office Word untrusted pointer dereference (CWE-822) enables local code execution with high impact across Microsoft 365 Apps for Enterprise and Office LTSC 2021/2024 editions (Windows and macOS). The vulnerability requires local access but no privileges or user interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:N), allowing unauthenticated local attackers to achieve full system compromise. Vendor-released patch available per Microsoft Security Response Center advisory. No public exploit identified at time of analysis. SSVC assessment indicates no confirmed exploitation, non-automatable attack, but total technical impact (full control).
Technical ContextAI
CWE-822 (Untrusted Pointer Dereference) occurs when an application dereferences a pointer derived from untrusted input without proper validation, leading to arbitrary memory access. In Microsoft Word's case, this involves processing document elements or file structures where attacker-controlled data influences pointer calculations. The vulnerability affects the core Word processing engine shared across Microsoft 365 Apps for Enterprise (subscription-based perpetual update channel) and Office LTSC (Long-Term Servicing Channel) 2021 and 2024 editions on both Windows and macOS platforms, as indicated by CPE strings spanning multiple Microsoft Office product families. The local attack vector suggests exploitation through maliciously crafted Word documents or local file system manipulation rather than remote delivery, though social engineering could facilitate initial file placement.
RemediationAI
Apply vendor-released security updates immediately via Microsoft Update or enterprise deployment tools. For Microsoft Office LTSC for Mac 2021 and 2024, upgrade to build 16.108.26041219 or later. For Microsoft 365 Apps for Enterprise and Office LTSC 2021/2024 on Windows, consult the monthly security release schedule at https://aka.ms/OfficeSecurityReleases for specific build numbers and deployment packages. Enterprise administrators should prioritize systems with untrusted local users or those processing documents from external sources. In environments where immediate patching is not feasible, consider application whitelisting to prevent execution of untrusted Word documents, implement Protected View settings to sandbox document rendering, or restrict Word usage to trusted document sources only. Verify patch deployment through Microsoft Update compliance reporting or endpoint management platforms. Full remediation guidance is available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33114.
Local code execution in Microsoft Word (and Office/SharePoint components that render Word content) stems from an integer
Arbitrary code execution in Microsoft Office Word (and the broader Office/365/SharePoint family) arises from a stack-bas
Local code execution in Microsoft Word (part of Microsoft 365 Apps, Office 2019, Office LTSC 2021/2024, and Office for M
Arbitrary code execution in Microsoft PowerPoint (and the broader Microsoft Office/365 suite on Windows and macOS) arise
Local code execution in Microsoft Office PowerPoint (including Microsoft 365 Apps, Office 2019, Office LTSC 2021/2024, a
Local code execution in Microsoft Office PowerPoint (CWE-122 heap-based buffer overflow) lets an unauthorized attacker r
Local code execution in Microsoft Word (and the wider Microsoft Office / Microsoft 365 Apps family) lets an unauthorized
Local code execution in Microsoft Word (Office 2016/2019, Microsoft 365 Apps, Office LTSC 2021/2024) arises from a heap-
Local code execution in Microsoft Office Word (CWE-416 use-after-free) allows an unauthorized attacker to run arbitrary
Local code execution in Microsoft Office Word (Microsoft 365 Apps, Office 2019/LTSC 2021/2024, Word 2016, and the macOS
Local code execution in Microsoft Office Word (via a stack-based buffer overflow, CWE-121) lets an attacker run arbitrar
Local code execution in Microsoft Office Word (across Microsoft 365 Apps, Office 2019/LTSC 2021/2024, Office for Mac, an
Same weakness CWE-822 – Untrusted Pointer Dereference
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today