Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 3 products
複数の #Microsoft Office製品には、次の脆弱性が存在します。（CWE-426、CVE-2026-20943）対応策はアップデートです。 https://jvn.jp/jp/JVN04984838/index.html
Post summary
The post notes that multiple Microsoft Office products have CVE-2026-20943 (CWE‑426) and recommends applying the available update.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | office | 2016 | - | x64 |
| App | microsoft | office | 2016 | - | x86 |
| App | microsoft | office_deployment_tool | - | - | - |
| App | microsoft | sharepoint_server | - | - | - |
| App | microsoft | sharepoint_server | 2016 | - | - |
| App | microsoft | sharepoint_server | 2019 | - | - |