CVE-2026-35440
No fix known EPSS <1%CVSS 5.5
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Products: Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Word 2016