CVE-2026-70300

Summary

A critical untrusted pointer dereference vulnerability in Microsoft Word allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when Word processes untrusted input from documents, potentially leading to complete system compromise.

Exploitability

Exploitation is relatively straightforward requiring only a malicious Word document delivered over the network, with no user interaction needed for initial execution.

Blast radius

The vulnerability affects all Windows users running Microsoft Office Word, making it highly impactful across enterprise environments where Word documents are commonly shared and opened.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the ability to open .docx files from untrusted sources or implement strict file validation policies. No specific fixed version is published in the description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.