← Back to browse · API

CVE-2026-21514

Severity
HIGH
CVSS
7.8
EPSS
0.01517
Risk score
56.73
CISA KEV
Yes
PoC
No
Published
2026-02-10
Modified
2026-02-10
First seen
2026-08-07
Aliases
EUVD-2026-7334, GHSA-CJJ3-M869-748G
Products
Microsoft:Microsoft 365 Apps for Enterprise 16.0.1 <https://aka.ms/OfficeSecurityReleases, Microsoft:Microsoft Office LTSC 2021 16.0.1 <https://aka.ms/OfficeSecurityReleases, Microsoft:Microsoft Office LTSC 2024 16.0.0 <https://aka.ms/OfficeSecurityReleases, Microsoft:Microsoft Office LTSC for Mac 2021 16.0.1 <16.106.26020821, Microsoft:Microsoft Office LTSC for Mac 2024 16.0.0 <16.106.26020821, Microsoft:Office
Sources
euvd EUVD-2026-7334
cisa.gov CVE-2026-21514

Description

Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.

References