{"id":"CVE-2026-110051","aliases":[],"cve":{"records":[{"id":"CVE-2026-110051","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-13T15:44:30.898Z","published":"2026-11-10T18:20:58.084Z","modified":"2026-11-13T18:09:42.547Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:09:42.547Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T20:50:35.548Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110051","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-681","description":"CWE-681: Incorrect Conversion between Numeric Types","source":"microsoft"},{"id":"CWE-822","description":"CWE-822: Untrusted Pointer Dereference","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.0.14334.21048"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.17932.21140"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.115.26110837"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.115.26110837"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"16.115.26110837"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T20:43:09.048074Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Microsoft Office Word Information Disclosure Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","score":6.5,"severity":"medium","published":"2026-11-10T18:20:58.084Z","modified":"2026-11-13T18:09:42.547Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Microsoft 365 Apps for Enterprise","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"},{"vendor":"Microsoft","name":"Microsoft Office 365 for Mac","platforms":[],"versions":[{"version":"1.0.0","status":"affected","lessThan":"16.115.26110837","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2021","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"16.0.14334.21048","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2024","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.17932.21140","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"},{"vendor":"Microsoft","name":"Microsoft Office LTSC for Mac 2021","platforms":[],"versions":[{"version":"16.0.1","status":"affected","lessThan":"16.115.26110837","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"},{"vendor":"Microsoft","name":"Microsoft Office LTSC for Mac 2024","platforms":[],"versions":[{"version":"16.0.0","status":"affected","lessThan":"16.115.26110837","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110051"],"sources":[{"name":"CVE","id":"CVE-2026-110051","modified":"2026-11-13T18:09:42.547Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","score":6.5}],"sourceAffected":[],"observedAt":"2026-11-13T18:32:35.439Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T04:05:32.009Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-12T05:50:36.232Z","attemptedAt":"2026-11-12T05:50:36.232Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-12T05:50:36.030Z","attemptedAt":"2026-11-12T05:50:36.030Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-12T05:50:37.530Z","attemptedAt":"2026-11-12T05:50:37.530Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-12T05:50:36.467Z","attemptedAt":"2026-11-12T05:50:36.467Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-xqgg-jwxr-8hqw","url":"https://github.com/advisories/GHSA-xqgg-jwxr-8hqw","modified":"2026-11-10T21:32:39Z","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","checkedAt":"2026-11-12T05:50:36.030Z"},{"source":"NVD","id":"CVE-2026-110051","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110051","modified":"2026-11-10T21:18:17.277","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","checkedAt":"2026-11-12T05:50:36.232Z"},{"source":"ENISA EUVD","id":"EUVD-2026-122159","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122159","modified":"Nov 11, 2026, 5:16:22 PM","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","checkedAt":"2026-11-12T05:50:37.530Z"}],"aiSummary":{"text":"Microsoft Office Word has an information disclosure vulnerability due to incorrect conversion between numeric types, affecting versions including 16.0.1 of Microsoft 365 Apps for Enterprise and Microsoft Office LTSC 2021. An attacker may disclose information over a network. The vulnerability is caused by CWE-681: Incorrect Conversion between Numeric Types.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T00:16:34.737Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-110051"}]}}