Description
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | affected |
|
||||||
| Microsoft | Microsoft Office 2019 | affected |
|
||||||
| Microsoft | Microsoft Office 365 for Mac | affected |
|
||||||
| Microsoft | Microsoft Office LTSC 2021 | affected |
|
||||||
| Microsoft | Microsoft Office LTSC 2024 | affected |
|
||||||
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | affected |
|
||||||
| Microsoft | Microsoft SharePoint Server 2019 | affected |
|
||||||
| Microsoft | Microsoft SharePoint Server Subscription Edition | affected |
|
||||||
| Microsoft | Microsoft Word 2016 | affected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Tue, 14 Jul 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | |
| Title | Microsoft Word Information Disclosure Vulnerability | |
| First Time appeared |
Microsoft
Microsoft 365 Apps Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft office 365 Microsoft sharepoint Server Microsoft sharepoint Server 2016 Microsoft sharepoint Server 2019 Microsoft word 2016 |
|
| Weaknesses | CWE-197 | |
| CPEs | cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:* cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:word_2016:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft
Microsoft 365 Apps Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft office 365 Microsoft sharepoint Server Microsoft sharepoint Server 2016 Microsoft sharepoint Server 2019 Microsoft word 2016 |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-07-14T18:45:46.658Z
Reserved: 2026-06-16T15:03:49.682Z
Link: CVE-2026-55142
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-197
Numeric Truncation Error