Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Patch1 |
| 2026-04-15 | 1 | Disclosure1 |
CVE-2026-33114 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://www.cve.org/CVERecord?id=CVE-2026-33114
Post summary
The text announces a new Microsoft Office Word vulnerability (CVE-2026-33114) that allows local code execution via an untrusted pointer dereference, with no indication of active exploitation, patch, or PoC.
CVE-2026-33114 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Untrusted pointer dereference in Microsoft Office Word allows unauth attacker to achieve RCE by tricking user into opening malicious document that triggers local code execution. Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Microsoft 365 Apps for Enterprise Affected Version: >= 16.0.1 and < https://aka.ms/OfficeSecurityReleases Sources Vendor: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33114
Post summary
Microsoft released a patch for CVE-2026-33114, a high‑severity RCE in Office 365 Apps for Enterprise; no public PoC or active exploitation is reported.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | macos | - |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2024 | macos | - |