cve-2026-41101

CVE-2026-41101 is a spoofing vulnerability in Microsoft Word for Android, disclosed by Microsoft on May 12, 2026. The Security Update Guide entry confirms the product and impact but provides limited technical details. In mobile Office environments, trust is critical, and this flaw could allow an attacker to make a document, prompt, identity, or workflow appear legitimate when it is not. IT administrators should prioritize patching Android devices running Word to mitigate spoofing risks. The tag covers discussions about the vulnerability, its implications for mobile security, and guidance for applying the security update.