medium4.3
CVE-2026-40421
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Impact
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Office | Versions 2019, 2024 |
| Microsoft | Office Long Term Servicing Channel | Version 2021 |
| Microsoft | Word | Version 2016 |