Microsoft’s CVE-2026-45645 advisory describes a Microsoft Office remote code execution vulnerability even though its CVSS attack vector is local because “remote code execution” describes where the attacker’s code can end up running, while AV:L describes the mechanics required to trigger the bug...