← Back
CVE-2026-26110
LowDescription
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
Scores & Signals
| CVSS 3.1 | 8.4 — HIGH |
| EPSS score | 0.0007 (21.4th percentile) |
| CISA KEV | No |
| Affected | Microsoft 365 Apps |
| Published | 2026-03-10 |
Sources
- CVE-2026-26110 nvd — 2026-03-10