Description Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. Remediation References CVE-2026-20948 Related Vulnerabilities Atlassian Jira Improper Privilege Management Vulnerability (CVE-2018-13400) SharePoint Use After Free Vulnerability (CVE-2025-62559) WordPress Plugin WP Customer Reviews Unspecified Vulnerability (3.0.7) WordPress Plugin MediaRSS external gallery TimThumb Arbitrary File Upload (0.1) IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20519) Severity High Classification CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-822 CVE-2026-20948