Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
2026-01-13T18:16:21.687
2026-01-16T16:14:34.970
Analyzed
CVSSv3.1: 7.0 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | office | 2016 | Yes |
| Application | microsoft | office | 2016 | Yes |
| Application | microsoft | office_deployment_tool | < 16.0.19426.20170 | Yes |
| Application | microsoft | sharepoint_server | < 16.0.19127.20442 | Yes |
| Application | microsoft | sharepoint_server | 2016 | Yes |
| Application | microsoft | sharepoint_server | 2019 | Yes |