cvss 3.1

The cvss 3.1 tag covers practical explanations of how the Common Vulnerability Scoring System describes Microsoft security flaws. Current coverage focuses on CVE-2026-55045, an out-of-bounds read in Microsoft Office that can lead to code execution. The discussion explains why Microsoft may call a vulnerability remote code execution while its CVSS 3.1 Attack Vector is local: CVSS measures how the vulnerable component must be reached, not where the attacker is physically located. It also examines the CVSS base score of 8.4 and the vector’s key characteristics, including low attack complexity, no privileges or user interaction required, and high confidentiality, integrity, and availability impact.