<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: word</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-83951: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</title><link>https://patchthecve.com/cve/CVE-2026-83951.html</link><guid>https://patchthecve.com/cve/CVE-2026-83951.html</guid><pubDate>Tue, 08 Sep 2026 20:43:42 +0000</pubDate><description>MEDIUM 5.5: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</description></item><item><title>CVE-2026-83949: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</title><link>https://patchthecve.com/cve/CVE-2026-83949.html</link><guid>https://patchthecve.com/cve/CVE-2026-83949.html</guid><pubDate>Tue, 08 Sep 2026 20:44:11 +0000</pubDate><description>MEDIUM 5.5: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</description></item><item><title>CVE-2026-80079: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net</title><link>https://patchthecve.com/cve/CVE-2026-80079.html</link><guid>https://patchthecve.com/cve/CVE-2026-80079.html</guid><pubDate>Tue, 08 Sep 2026 20:47:55 +0000</pubDate><description>MEDIUM 6.5: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</description></item><item><title>CVE-2026-78522: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net</title><link>https://patchthecve.com/cve/CVE-2026-78522.html</link><guid>https://patchthecve.com/cve/CVE-2026-78522.html</guid><pubDate>Tue, 08 Sep 2026 20:49:52 +0000</pubDate><description>MEDIUM 6.5: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</description></item><item><title>CVE-2026-69764: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net</title><link>https://patchthecve.com/cve/CVE-2026-69764.html</link><guid>https://patchthecve.com/cve/CVE-2026-69764.html</guid><pubDate>Wed, 09 Sep 2026 04:19:24 +0000</pubDate><description>HIGH 8.8: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</description></item><item><title>CVE-2026-66806: Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</title><link>https://patchthecve.com/cve/CVE-2026-66806.html</link><guid>https://patchthecve.com/cve/CVE-2026-66806.html</guid><pubDate>Fri, 14 Aug 2026 13:06:17 +0000</pubDate><description>MEDIUM 5.5: Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</description></item><item><title>CVE-2026-63525: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.</title><link>https://patchthecve.com/cve/CVE-2026-63525.html</link><guid>https://patchthecve.com/cve/CVE-2026-63525.html</guid><pubDate>Thu, 13 Aug 2026 18:57:21 +0000</pubDate><description>HIGH 7.8: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.</description></item><item><title>CVE-2026-63521: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</title><link>https://patchthecve.com/cve/CVE-2026-63521.html</link><guid>https://patchthecve.com/cve/CVE-2026-63521.html</guid><pubDate>Fri, 14 Aug 2026 17:33:26 +0000</pubDate><description>MEDIUM 5.5: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</description></item><item><title>CVE-2026-42832: Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.</title><link>https://patchthecve.com/cve/CVE-2026-42832.html</link><guid>https://patchthecve.com/cve/CVE-2026-42832.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>HIGH 7.7: Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.</description></item><item><title>CVE-2026-41101: Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.</title><link>https://patchthecve.com/cve/CVE-2026-41101.html</link><guid>https://patchthecve.com/cve/CVE-2026-41101.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>HIGH 7.1: Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.</description></item><item><title>CVE-2026-40421: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker t</title><link>https://patchthecve.com/cve/CVE-2026-40421.html</link><guid>https://patchthecve.com/cve/CVE-2026-40421.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 4.3: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</description></item><item><title>CVE-2026-40367: Access of resource using incompatible type (&#x27;type confusion&#x27;) in Microsoft Office Word allows an unauthorized </title><link>https://patchthecve.com/cve/CVE-2026-40367.html</link><guid>https://patchthecve.com/cve/CVE-2026-40367.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>HIGH 8.4: Access of resource using incompatible type (&#x27;type confusion&#x27;) in Microsoft Office Word allows an unauthorized attacker to execute code locally.</description></item><item><title>CVE-2026-40366: Access of resource using incompatible type (&#x27;type confusion&#x27;) in Microsoft Office Word allows an unauthorized </title><link>https://patchthecve.com/cve/CVE-2026-40366.html</link><guid>https://patchthecve.com/cve/CVE-2026-40366.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>HIGH 8.4: Access of resource using incompatible type (&#x27;type confusion&#x27;) in Microsoft Office Word allows an unauthorized attacker to execute code locally.</description></item><item><title>CVE-2026-40364: Access of resource using incompatible type (&#x27;type confusion&#x27;) in Microsoft Office Word allows an unauthorized </title><link>https://patchthecve.com/cve/CVE-2026-40364.html</link><guid>https://patchthecve.com/cve/CVE-2026-40364.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>HIGH 8.4: Access of resource using incompatible type (&#x27;type confusion&#x27;) in Microsoft Office Word allows an unauthorized attacker to execute code locally.</description></item><item><title>CVE-2026-40361: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.</title><link>https://patchthecve.com/cve/CVE-2026-40361.html</link><guid>https://patchthecve.com/cve/CVE-2026-40361.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>HIGH 8.4: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.</description></item><item><title>CVE-2026-35440: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker t</title><link>https://patchthecve.com/cve/CVE-2026-35440.html</link><guid>https://patchthecve.com/cve/CVE-2026-35440.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 5.5: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</description></item></channel></rss>