CVE-2026-40421
No fix known EPSS <1%CVSS 4.3
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Products: Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Word 2016