high7.8
CVE-2026-64904
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
Impact
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Microsoft 365 | All versions |
| Microsoft | Office 2019 | All versions |
| Microsoft | Office 2021 | All versions |
| Microsoft | Office 2024 | All versions |