Jul 2026: Microsoft Word Information Disclosure Vulnerability
CVE-2026-55142 Published on July 14, 2026

Microsoft Word Information Disclosure Vulnerability
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Vendor Advisory NVD

Weakness Type

Numeric Truncation Error

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. When a primitive is cast to a smaller primitive, the high order bits of the large value are lost in the conversion, potentially resulting in an unexpected value that is not equal to the original value. This value may be required as an index into a buffer, a loop iterator, or simply necessary state data. In any case, the value cannot be trusted and the system will be in an undefined state. While this method may be employed viably to isolate the low bits of a value, this usage is rare, and truncation usually implies that an implementation error has occurred.


Products Associated with CVE-2026-55142

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Office 365
 
Microsoft Sharepoint Server 2016
 
Microsoft Sharepoint Server 2019
 
Microsoft Office 2019
 
Microsoft 365 Apps
 
Microsoft Office 2021
 
Microsoft Sharepoint Server
 
Microsoft Office 2024
 
Microsoft Word 2016
 

Affected Versions

Microsoft 365 Apps for Enterprise: Microsoft Office 2019: Microsoft Office 365 for Mac: Microsoft Office LTSC 2021: Microsoft Office LTSC 2024: Microsoft SharePoint Enterprise Server 2016: Microsoft SharePoint Server 2019: Microsoft SharePoint Server Subscription Edition: Microsoft Word 2016: