CVE-2026-102867
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Oct 13, 2026 · updated Oct 14, 2026 · microsoft 365 apps
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Oct 14, 2026 · NIST NVD
Updated
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Affected
- cpe microsoft/365 appsversion unspecified
- cpe microsoft/office 2021version unspecified
- cpe microsoft/office 2024version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-102867
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-102867
30-day exploitation probability 0.9%
first.org - NIST NVDVulnerability recordCVE-2026-102867
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
nvd.nist.gov