Microsoft’s CVE entry for the Office vulnerability CVE‑2026‑20952 is labeled a “Remote Code Execution” issue even though the published CVSS vector shows the Attack Vector as Local (AV:L) — this is intentional language, not an error: the CVE headline signals where the attacker can be located and...