NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-26110

CVSS 3.1: 7.8 high
EPSS: <1%p41
Published: Mar 10, 2026 · Mar 10, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-26110 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Vendors: microsoft

Products: 365 apps, 365 copilot, office, office long term servicing channel

Weakness: CWE-843

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

5 stories

Microsoft patches 80+ vulnerabilities, six flagged as "more likely" to be exploited

Help Net SecurityMar 19, 10:31 UTC · Mar 19, 2026VulnerabilityExploitedCVE-2026-21262 CVE-2026-26127 CVE-2026-24289+101

60

Microsoft Patch Tuesday, March 2026 Edition

Krebs on SecurityMar 11, 12:51 UTC · Mar 11, 2026VulnerabilityCVE-2026-21262 CVE-2026-26127 CVE-2026-26113+61 · 1 read

60

Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs

Security AffairsMar 10, 23:29 UTC · Mar 10, 2026VulnerabilityExploitedCVE-2026-26127 CVE-2026-21262 CVE-2026-21536+14 · 1 read

60

Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities

Cisco TalosMar 10, 22:23 UTC · Mar 10, 2026VulnerabilityCVE-2026-26110 CVE-2026-26113 CVE-2026-26144+142 · 1 read

60

Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero

CyberScoopMar 10, 19:37 UTC · Mar 10, 2026VulnerabilityExploitedCVE-2026-21262 CVE-2026-26127 CVE-2026-23668+82

60