Description Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Remediation References CVE-2025-53736 Related Vulnerabilities Oracle HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2022-0391) PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2484) MongoDb Improper Authentication Vulnerability (CVE-2014-8180) Twisted Web HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-12387) MySQL CVE-2021-35629 Vulnerability (CVE-2021-35629) Severity Medium Classification CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-126 CVE-2025-53736