← Back
CVE-2026-40363
LowDescription
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Scores & Signals
| CVSS 3.1 | 8.4 — HIGH |
| EPSS score | 0.0006 (17.9th percentile) |
| CISA KEV | No |
| Affected | Microsoft 365 Apps |
| Published | 2026-05-12 |
Sources
- CVE-2026-40363 nvd — 2026-05-12