Threat Intelligence / CVE / CVE-2026-26110
CVE-2026-26110
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
CWE-843
Threats tracking this CVE
- Microsoft Office Preview Pane Remote Code Execution — CVE-2026-26110 (Type Confusion) & CVE-2026-26113 (Untrusted Pointer Dereference) — CRITICAL
- Microsoft Office RCE via Preview Pane (CVE-2026-26110, CVE-2026-26113) — March 2026 Patch Tuesday — CRITICAL
References
Full detection coverage & IOCs for threats exploiting CVE-2026-26110 are available via the Threadlinqs MCP server (Purple tier). View plans →