NetSight
medium5.5

CVE-2026-55142

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Impact

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected products

VendorProductAffected versions
Microsoft365 Apps
All versions
MicrosoftMicrosoft 365
All versions
MicrosoftOffice 2019
All versions
MicrosoftOffice 2021
All versions
MicrosoftOffice 2024
All versions
MicrosoftSharepoint Server
before 16.0.19725.20434
Versions 2016, 2019
MicrosoftWord
Version 2016
MicrosoftMicrosoft 365 Apps For Enterprise
from 16.0.1 before https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2019
from 19.0.0 before https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 365 For Mac
from 1.0.0 before 16.111.26071215
MicrosoftMicrosoft Office LTSC 2021
from 16.0.1 before https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2024
from 16.0.0 before https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft SharePoint Enterprise Server 2016
from 16.0.0 before 16.0.5561.1001
MicrosoftMicrosoft SharePoint Server 2019
from 16.0.0 before 16.0.10417.20175
MicrosoftMicrosoft SharePoint Server Subscription Edition
from 16.0.0 before 16.0.19725.20434
MicrosoftMicrosoft Word 2016
from 16.0.1 before 16.0.5561.1000

Weakness classification

References