CVE-2026-21514

Was es ist

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

CISA: Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.

Was zu tun ist

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Frist für US-Bundesbehörden: 3. März 2026

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514