First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-88210

HighCVSS 7.8/10Last modified Oct 15, 2026

Description

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft 365 Apps for Enterprise	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office 365 for Mac	>= 1.0.0, < 16.114.26101123
Microsoft	Microsoft Office LTSC 2024	>= 16.0.0, < 16.0.17932.21056
Microsoft	Microsoft Office LTSC for Mac 2021	>= 16.0.1, < 16.114.26101123
Microsoft	Microsoft Office LTSC for Mac 2024	>= 16.0.0, < 16.114.26101123

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88210Vendor Advisory

Timeline

Published: Oct 13, 2026
Last modified: Oct 15, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-882115.7Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.CVE-2026-882127.5Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-882137.8Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.CVE-2026-882156.4Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.CVE-2026-882167.5Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.CVE-2026-882175.5Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.CVE-2026-882189.8Double free in Windows DNS allows an unauthorized attacker to execute code over a network.CVE-2026-882198.8Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.CVE-2026-88227.5A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS CVE-2026-882205.5Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.CVE-2026-882217.0Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-882228.8Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

CVE-2026-88210: High severity, CVSS 7.8 | Vulnix