Microsoft Word up to Word 2016 file access

Summaryinfo

A vulnerability labeled as problematic has been found in Microsoft Word 365 Apps/2019/LTSC 2021/LTSC 2024/Word 2016. Impacted is an unknown function. Such manipulation leads to file access. This vulnerability is referenced as CVE-2026-35440. It is possible to launch the attack remotely. No exploit is available. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Microsoft Word 365 Apps/2019/LTSC 2021/LTSC 2024/Word 2016. Affected by this issue is an unknown part. The manipulation with an unknown input leads to a file access vulnerability. Using CWE to declare the problem leads to CWE-552. The product makes files or directories accessible to unauthorized actors, even though they should not be. Impacted is confidentiality. CVE summarizes:

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

The weakness was published 05/12/2026 as confirmed security update guide (Website). The advisory is available at msrc.microsoft.com. This vulnerability is handled as CVE-2026-35440. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Successful exploitation requires user interaction by the victim. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 05/20/2026). This vulnerability is assigned to T1083 by the MITRE ATT&CK project.

The vulnerability scanner Nessus provides a plugin with the ID 314343 (Security Updates for Microsoft Word Products (May 2026)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 16.0.5552.1002 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The best possible mitigation is suggested to be patching the affected component. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (314343). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Word Processing Software

Vendor

• Microsoft

Name

• Word

Version

• 365 Apps
• 2019
• LTSC 2021
• LTSC 2024
• Word 2016

License

• commercial

Website

• Vendor: https://www.microsoft.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion