cve-2026-33095

Microsoft’s title and the CVSS vector are describing two different things, so they are not actually in conflict. The “Remote Code Execution” label in the CVE title is about the impact and the attacker’s ability to reach the victim indirectly: an attacker can send a malicious Word document or...