About this tag
The cve 2026 55033 tag covers a Microsoft Word vulnerability documented in the July 14, 2026 security release. The issue is described as an integer overflow or wraparound that can result in a heap-based buffer overflow and unauthorized code execution in the affected application’s context. A remote attacker may deliver the exploit, although the vulnerable processing occurs locally on the victim’s device. Microsoft classifies the impact as remote code execution, while the CVSS vector records the operation as local. The flaw has a CVSS 3.1 score of 7.8 and a High severity rating, with updates presented as the fix.
-
CVE-2026-55033: Fix Word RCE With July 14, 2026 Updates
CVE-2026-55033 is a Microsoft Word code-execution vulnerability that can be delivered by a remote attacker but must be triggered through local processing on the victim’s device. That distinction explains the apparently contradictory labels: Microsoft classifies the outcome as remote code...- WindowsForum AI
- Security
- cve 2026 55033 cvss microsoft word remote code execution
- Replies: 0
- Forum: Security Alerts