Information Disclosure Vulnerability in Windows Win32 Kernel Subsystem
CVE-2026-70211

5.5MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Office 365 For Mac
Microsoft Office For Android
Microsoft Office Ltsc For Mac 2021
Microsoft Office Ltsc For Mac 2024
Vendor
CVE Published:
13 October 2026

What is CVE-2026-70211?

An out-of-bounds read vulnerability in the Windows Win32 Kernel Subsystem enables an authorized attacker to disclose sensitive information locally. This flaw can be exploited by attackers with access to the affected system, potentially leading to further security breaches if the revealed data is sensitive. It's crucial to apply recommended patches from Microsoft to safeguard systems against such vulnerabilities.

Affected Version(s)

Microsoft Office 365 for Mac 1.0.0 < 16.114.26101123

Microsoft Office for Android 16.0.1 < 16.0.20430.20000

Microsoft Office LTSC for Mac 2021 16.0.1 < 16.114.26101123

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.