Information Disclosure Vulnerability in Microsoft Graphics Component
CVE-2026-105731

5.5MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Office For Android
Vendor
CVE Published:
13 October 2026

What is CVE-2026-105731?

The Microsoft Graphics Component is susceptible to a vulnerability that arises from the use of uninitialized resources. This flaw can potentially allow an authorized attacker to exploit the component to disclose sensitive information locally. Affected users should be cautious and consider applying necessary patches to safeguard against this risk.

Affected Version(s)

Microsoft Office for Android 16.0.1 < 16.0.20430.20000

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.