What is the CVSS score of EUVD-2026-44215?

EUVD-2026-44215 has a contested CVSS base score of 7.8 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Microsoft Sharepoint Enterprise Server 2016 EUVD-2026-44215

Q: Which versions of Microsoft Sharepoint Enterprise Server 2016 are affected by EUVD-2026-44215?

CVE-2026-55130 is a critical vulnerability in Microsoft Word (Office 2016, 2019, Microsoft 365 Apps, and LTSC 2021/2024) that enables attackers to compromise entire workstations through social…. A patch is available.

Q: How to fix or mitigate EUVD-2026-44215?

Within 24 hours, inventory all systems running Microsoft Office 2016, 2019, Microsoft 365 Apps, or Office LTSC 2021/2024 and assess exposure based on document-sharing workflows and user risk profiles. Within 7 days, deploy the Microsoft-released patch to all affected Office versions using your standard change management process, prioritizing users with elevated privileges or access to sensitive data. Within 30 days, verify complete patch deployment across all endpoints and conduct security awareness training emphasizing the risks of opening documents from untrusted sources.

| CVE-2026-55130 HIGH

Heap-based Buffer Overflow (CWE-122)

2026-07-14 microsoft

GHSA-p342-gc5g-728w

Buffer Overflow Heap Overflow Microsoft Microsoft Sharepoint Enterprise Server 2016 Microsoft Sharepoint Server 2019 Microsoft Sharepoint Server Subscription Edition Microsoft 365 Apps For Enterprise Microsoft Office Ltsc 2024 Microsoft Office 2019 Microsoft Office Ltsc 2021 Microsoft Word 2016

High

Disputed · 7.8 Vendor: microsoft

Temporal: 6.8

View

Vulnerability Assessment

Weakness

CWE

CWE-122

ASVS 5.0

V15 - Secure Coding and Architecture Heap buffer bounds checking

MITRE ATT&CK

1 technique across 1 tactic: Execution

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Act Now Prioritize within 24-48h. Why: Active threat signals + CRITICAL/HIGH severity.

Patch available 0.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jul 14, 2026

Local code execution in Microsoft Word (Office 2016/2019, Microsoft 365 Apps, Office LTSC 2021/2024) arises from a heap-based buffer overflow triggered when a victim opens a maliciously crafted document. An attacker who convinces a user to open a booby-trapped file can run arbitrary code in that user's context, achieving full compromise of confidentiality, integrity, and availability on the host. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV, though a vendor patch is available per Microsoft's MSRC advisory.

Affected VersionsENISA

Microsoft SharePoint Server 2019 16.0.0 <16.0.10417.20175

Microsoft Office LTSC 2024 16.0.0 <https://aka.ms/OfficeSecurityReleases

Microsoft Word 2016 16.0.1 <16.0.5561.1000

Microsoft SharePoint Enterprise Server 2016 16.0.0 <16.0.5561.1001

Microsoft 365 Apps for Enterprise 16.0.1 <https://aka.ms/OfficeSecurityReleases

Microsoft Office 2019 19.0.0 <https://aka.ms/OfficeSecurityReleases

Microsoft SharePoint Server Subscription Edition 16.0.0 <16.0.19725.20434

Microsoft Office LTSC 2021 16.0.1 <https://aka.ms/OfficeSecurityReleases

Affected Packages

euvd microsoft_sharepoint_enterprise_server_2016 fix: 16.0.5561.1001

euvd microsoft_sharepoint_server_2019 fix: 16.0.10417.20175

euvd microsoft_sharepoint_server_subscription_edition fix: 16.0.19725.20434

euvd microsoft_word_2016 fix: 16.0.5561.1000

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 4 packages in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when Microsoft Sharepoint Enterprise Server 2016 gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Sources disagree (Medium–Critical)

Vendor (microsoft) PRIMARY 7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ENISA EUVD CRITICAL

CIRCL (temporal) 6.8 MEDIUM

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: microsoft

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

DescriptionCVE.org

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Executive ViewAI

Why It Matters

CVE-2026-55130 is a critical vulnerability in Microsoft Word (Office 2016, 2019, Microsoft 365 Apps, and LTSC 2021/2024) that enables attackers to compromise entire workstations through social engineering-convincing users to open malicious documents. Successful exploitation results in complete system compromise, threatening all employee data and system integrity. Given Microsoft Office's pervasive use across most organizations and reliance on document sharing, immediate patching is essential to mitigate this threat vector.

Recommended Action

Within 24 hours, inventory all systems running Microsoft Office 2016, 2019, Microsoft 365 Apps, or Office LTSC 2021/2024 and assess exposure based on document-sharing workflows and user risk profiles. Within 7 days, deploy the Microsoft-released patch to all affected Office versions using your standard change management process, prioritizing users with elevated privileges or access to sensitive data. Within 30 days, verify complete patch deployment across all endpoints and conduct security awareness training emphasizing the risks of opening documents from untrusted sources.

Business Impact: High

Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score

0.3%

Top 77% exploitable

EU Gov Alert

Listed

Top-tier national CERT alert

Threat Intel

1 sources

Vendor Action

See Below

Required. The vulnerability documented by this CVE requires customer action to resolve.

Vendor Status

Publicly Disclosed:No

Exploited:No

Latest Software Release:Exploitation Unlikely

Data Quality

7 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS

Vulnrichment NCSC-NL MSRC

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.3%

Patch available Yes

Active threat Yes

Deciding rule

Active threat signals + CRITICAL/HIGH severity

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision

Scheduled

Exploitation

None

System Exposure· derived

Small

Automatable

Human Impact

High

Technical Impact

Total

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +39

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: +20

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Heap Overflow HIGH

A heap overflow occurs when a program writes data beyond the bounds of a buffer allocated in the heap memory region.