Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
    (CVE-2026-58651, CVE-2026-64915)

  - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code     locally. (CVE-2026-63527, CVE-2026-64907)

  - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information     locally. (CVE-2026-63521, CVE-2026-63528, CVE-2026-63530, CVE-2026-63531, CVE-2026-64917, CVE-2026-70310)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities:

  - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute     code locally. (CVE-2026-63527, CVE-2026-64907)

  - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
    (CVE-2026-70311)

  - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose     information locally. (CVE-2026-63521, CVE-2026-63528, CVE-2026-63530, CVE-2026-63531,     CVE-2026-64917, CVE-2026-70310)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
335111	Security Updates for Microsoft Word Products C2R (August 2026)	Nessus	Windows	Local	medium
334624	Security Updates for Microsoft Word Products (August 2026)	Nessus	Windows : Microsoft Bulletins	Local	medium

Detections

Analytics

CVE-2026-63521

medium

Tenable Plugins

medium

medium