CVE-2026-40361 Microsoft Outlook and Word Remote Code Execution Vulnerability Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.01 CVSS 8.4 CVE-2026-40361 Microsoft US Microsoft Security · 12. 5. 16:00