CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-40367

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 36.0%

CVSS Severity

CVSS v3 Score 8.4

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40367

Products affected by CVE-2026-40367

Microsoft » 365 Apps » Version: N/A

cpe:2.3:a:microsoft:365_apps:-
Microsoft » Office » Version: 2019

cpe:2.3:a:microsoft:office:2019
Microsoft » Office Long Term Servicing Channel » Version: 2021

cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021
Microsoft » Office Long Term Servicing Channel » Version: 2024

cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024
Microsoft » Sharepoint Server » Version: N/A

cpe:2.3:a:microsoft:sharepoint_server:-
Microsoft » Sharepoint Server » Version: 16.0.10417.20003

cpe:2.3:a:microsoft:sharepoint_server:16.0.10417.20003
Microsoft » Sharepoint Server » Version: 16.0.17328.20246

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20246
Microsoft » Sharepoint Server » Version: 16.0.17328.20292

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20292
Microsoft » Sharepoint Server » Version: 16.0.17328.20362

cpe:2.3:a:microsoft:sharepoint_server:16.0.17328.20362
Microsoft » Sharepoint Server » Version: 16.0.17928.20356

cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20356
Microsoft » Sharepoint Server » Version: 16.0.17928.20396

cpe:2.3:a:microsoft:sharepoint_server:16.0.17928.20396
Microsoft » Sharepoint Server » Version: 16.0.18526.20172

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20172
Microsoft » Sharepoint Server » Version: 16.0.18526.20286

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20286
Microsoft » Sharepoint Server » Version: 16.0.18526.20396

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20396
Microsoft » Sharepoint Server » Version: 16.0.18526.20424

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20424
Microsoft » Sharepoint Server » Version: 16.0.18526.20508

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20508
Microsoft » Sharepoint Server » Version: 16.0.18526.20518

cpe:2.3:a:microsoft:sharepoint_server:16.0.18526.20518
Microsoft » Sharepoint Server » Version: 16.0.19127.20100

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20100
Microsoft » Sharepoint Server » Version: 16.0.19127.20262

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20262
Microsoft » Sharepoint Server » Version: 16.0.19127.20338

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20338
Microsoft » Sharepoint Server » Version: 16.0.19127.20378

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20378
Microsoft » Sharepoint Server » Version: 16.0.19127.20442

cpe:2.3:a:microsoft:sharepoint_server:16.0.19127.20442
Microsoft » Sharepoint Server » Version: 2016

cpe:2.3:a:microsoft:sharepoint_server:2016
Microsoft » Sharepoint Server » Version: 2019

cpe:2.3:a:microsoft:sharepoint_server:2019
Microsoft » Word » Version: 2016

cpe:2.3:a:microsoft:word:2016

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-40367

Products

Pricing

Contact Us