CVE-2026-41101: Microsoft Word for Android Spoofing Vulnerability
Published May 12, 2026
·Updated
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
Other sources
Microsoft Word for Android Spoofing Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Word Android<16.0.19822.20190
Microsoft Word for Android<16.0.19822.20190
16.0.19822.20190
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.19822.20190
Event History
May 12, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·04:58 PM
Data Sourced
via MITRE·04:58 PM
DescriptionSeverity
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeaknessAffected Software
Jun 3, 2026
News Published
via Dark Reading·07:00 PM
News Published
via Dark Reading·07:50 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-41101?
The severity of CVE-2026-41101 is rated as high with a score of 7.1.
2
What type of vulnerability is CVE-2026-41101?
CVE-2026-41101 is a spoofing vulnerability in Microsoft Word for Android.
3
How does CVE-2026-41101 affect users?
CVE-2026-41101 allows an authorized attacker to perform spoofing attacks locally.
4
How do I fix CVE-2026-41101?
To mitigate CVE-2026-41101, ensure you apply the latest security updates from Microsoft for Word on Android.
5
What software is affected by CVE-2026-41101?
CVE-2026-41101 specifically affects Microsoft Word for Android.