CVE-2026-40364

High

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code…

secure@microsoft.com·CWE-122·Published 2026-05-12

CVSS

8.4

EPSS

0.04

KEV

Exploits

cve.orgen

143 chars

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

NVDen

143 chars

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	8.4	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C