Microsoft Word Information Disclosure Vulnerability
CVE-2026-45466

3.3LOW

Key Information:

Vendor: Microsoft
Status: Microsoft 365 Apps For Enterprise; Microsoft Office 365 For Mac; Microsoft Office Ltsc 2021; Microsoft Office Ltsc 2024
Vendor: CVE Published:; 9 June 2026

What is CVE-2026-45466?

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 365 for Mac -

Microsoft Office LTSC 2021 32-bit Systems 16.0.1

Score:

3.3

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2026-45466 Data