CVE-2026-55050: Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
Other sources
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5561.1001Patch KB5002892 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.10417.20175Patch KB5002885 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.111.26071215 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5561.1000Patch KB5002890 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.19725.20434Patch KB5002882
Event History
Frequently Asked Questions
What is the severity of CVE-2026-55050?
CVE-2026-55050 has a medium severity rating of 5.5.
What types of software are affected by CVE-2026-55050?
CVE-2026-55050 affects Microsoft SharePoint Server, Microsoft 365 Apps for Enterprise, Microsoft Word 2016, Microsoft Office 2019, Microsoft Office 2021, and Microsoft Office 2024.
What is the nature of the vulnerability in CVE-2026-55050?
CVE-2026-55050 is an information disclosure vulnerability that allows unauthorized attackers to disclose sensitive information locally.
How can I mitigate the risks posed by CVE-2026-55050?
To mitigate the risks of CVE-2026-55050, it is recommended to apply the latest security updates provided by Microsoft.
What attack vector is associated with CVE-2026-55050?
CVE-2026-55050 is associated with an out-of-bounds read that can be exploited to disclose information.