VulnerabilityPublished
ZDI-26-293: (0Day) Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability
Source Zero Day Initiative
0
Severity
MediumRated Medium by Zero Day Initiative
Data as of 26 May 2026, 20:33 UTC
What to do
AI-suggested
The primary mitigation is to restrict user interaction with untrusted or potentially malicious Microsoft Office files and links that could trigger the URI handler. Users and administrators should exercise caution when opening Office documents from untrusted sources. Monitor vendor advisories for any future updates.
Description
This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3.
References
Community reviews
Loading reviews…