CVE-2026-21514βMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
PUBLISHEDvulnerability record
2026-02-10 Β· last modified February 10, 2026
Metadata
Vulnerability Name
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
Description
Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.
Known To Be Used in Ransomware Campaigns?
Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.