Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Patch1 |
| 2026-04-15 | 1 | Disclosure1 |
CVE-2026-33115 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://www.cve.org/CVERecord?id=CVE-2026-33115
Post summary
The post announces the newly catalogued CVE‑2026‑33115, noting it is a use‑after‑free flaw in Microsoft Office Word that can lead to local code execution, but provides no proof of exploitation, active attack evidence, or mitigation information.
CVE-2026-33115 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office Word allows unauth attacker to achieve RCE locally by tricking user into opening malicious document that triggers memory corruption and code execution. Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Microsoft 365 Apps for Enterprise Affected Version: >= 16.0.1 and < https://aka.ms/OfficeSecurityReleases Sources Vendor: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33115
Post summary
Microsoft disclosed CVE‑2026‑33115, a high‑severity use‑after‑free RCE in Office, and has released a patch; no public PoC or exploitation evidence reported.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | macos | - |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2024 | macos | - |