{"id":"CVE-2026-66806","aliases":[],"cve":{"records":[{"id":"CVE-2026-66806","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-27T19:02:26.601Z","published":"2026-08-11T17:07:02.214Z","modified":"2026-10-30T17:22:48.684Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-10-30T17:22:48.684Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-08-11T21:06:12.726Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66806","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-193","description":"CWE-193: Off-by-one Error","source":"microsoft"},{"id":"CWE-125","description":"CWE-125: Out-of-bounds Read","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.0.5565.1000"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-08-11T21:00:10.758360Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Microsoft Office Word Information Disclosure Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","score":5.5,"severity":"medium","published":"2026-08-11T17:07:02.214Z","modified":"2026-10-30T17:22:48.684Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Microsoft 365 Apps for Enterprise","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-66806"},{"vendor":"Microsoft","name":"Microsoft Office 2019","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-66806"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2021","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-66806"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2024","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-66806"},{"vendor":"Microsoft","name":"Microsoft Word 2016","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"16.0.5565.1000","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-66806"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66806"],"sources":[{"name":"CVE","id":"CVE-2026-66806","modified":"2026-10-30T17:22:48.684Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-66806"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","score":5.5}],"sourceAffected":[],"observedAt":"2026-10-30T19:02:17.349Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:05:32.453Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T01:55:33.776Z","attemptedAt":"2026-10-29T01:55:33.776Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T01:55:33.957Z","attemptedAt":"2026-10-29T01:55:33.957Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T01:55:34.877Z","attemptedAt":"2026-10-29T01:55:34.877Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-29T01:55:33.753Z","attemptedAt":"2026-10-29T01:55:33.753Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-66806","url":"https://www.first.org/epss/","probability":0.00435,"percentile":0.37665,"date":"2026-10-28","checkedAt":"2026-10-29T01:55:33.753Z"},{"source":"NVD","id":"CVE-2026-66806","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66806","modified":"2026-08-14T13:06:17.913","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","checkedAt":"2026-10-29T01:55:33.776Z"},{"source":"NVD","id":"CVE-2026-66806","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66806","modified":"2026-08-14T13:06:17.913","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-10-29T01:55:33.776Z"},{"source":"GitHub Advisory Database","id":"GHSA-vr2p-489v-8hm2","url":"https://github.com/advisories/GHSA-vr2p-489v-8hm2","modified":"2026-08-11T18:31:49Z","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","checkedAt":"2026-10-29T01:55:33.957Z"},{"source":"ENISA EUVD","id":"EUVD-2026-56748","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56748","modified":"Oct 28, 2026, 8:08:27 PM","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","checkedAt":"2026-10-29T01:55:34.877Z"}],"aiSummary":{"text":"Microsoft Office Word has an off-by-one error, allowing local information disclosure. Affected versions include Microsoft 365 Apps for Enterprise 16.0.1, Microsoft Office 2019 19.0.0, Microsoft Office LTSC 2021 16.0.1, and Microsoft Office LTSC 2024 16.0.0. An attacker with local access can exploit this vulnerability.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T08:52:59.128Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-66806"}]}}