Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability - CVE-2026-21514

Executive Summary

Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.

CVSS Score: 9.0/10.0
Severity: CRITICAL

Affected Systems

• Microsoft Office

Detection & Mitigation

• Apply vendor patches as soon as available
• Monitor for indicators of compromise
• Review vendor advisories for specific guidance

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-21514

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

• NVD Entry