Type Confusion Vulnerability in Microsoft Office Word

CVE-2026-40364

What is CVE-2026-40364?

A type confusion vulnerability exists in Microsoft Office Word, allowing an unauthorized attacker to execute arbitrary code on the affected system. This occurs when an attacker exploits the handling of resource types in memory, enabling them to run malicious commands. Users of Microsoft Office Word versions 2019, 2021, and Microsoft 365 are urged to apply security updates promptly to mitigate exposure to this risk. For detailed information and patches, visit the Microsoft Security Response Center.

References