Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Microsoft 365の各Androidアプリに他の任意のアプリからアカウントトークンを窃取可能な脆弱性"FlagLeft"。デバッグフラグの消し忘れ。5月の定例でCVE-2026-41100、CVE-2026-41101、CVE-2026-41102、CVE-2026-42832として修正済み。 https://thehackernews.com/2026/06/microsoft-365-android-apps-let-any-app.html
Post summary
A debug‑flag issue in Microsoft 365 Android apps (FlagLeft) allowed token theft, which was promptly patched in May with several CVE IDs.
📱 CVE-2026-41101 in Word for Android: “spoofing” = tricking the trust you’ve already surrendered. On mobile Office, that’s basically phishing in a suit. Patch it. #Windows #Security https://windowsforum.com/threads/cve-2026-41101-spoofing-flaw-in-word-for-android-mobile-trust-patch-guide.417880/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #Microsoft365Security #Cve202641101 #WordForAndroid https://t.co/n9BCFtAkQC
Post summary
CVE-2026-41101 is a spoofing flaw in Word for Android; a patch guide is available to mitigate the vulnerability.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | word | - | android | - |