{"metadata": {"vulnerability": "CVE-2026-35440", "count": 36, "kinds": {"milestone": 9, "sighting": 3, "kev": 0, "other": 24}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0144", "record": "NCSC-2026-0144", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-02T19:21:11.805Z", "date_only": false, "value": "2026-04-02T19:21:11.805Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-35440", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": true, "value": "2026-05-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0584", "record": "CERTFR-2026-AVI-0584", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-35440", "record": "MSRC_CVE-2026-35440", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-35440", "record": "MSRC_CVE-2026-35440", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-35440", "record": "MSRC_CVE-2026-35440", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-35440", "record": "MSRC_CVE-2026-35440", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-12T14:00:00Z", "date_only": false, "value": "2026-05-12T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-35440", "field": "containers.cna.datePublic"}, {"timestamp": "2026-05-12T15:53:28Z", "date_only": false, "value": "2026-05-12T15:53:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144", "record": "CVE-2026-35440", "field": "creation_timestamp", "uuid": "6cfd5d73-c4ec-4bf6-9f5d-482a3953e5ad", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, of willekeurige code uit te voeren met rechten van het slachtoffer en mogelijk toegang te krijgen tot gevoelige gegevens in de context van het slachtoffer.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-33823 is reeds door Microsoft centraal verholpen en slechts toegevoegd ter informatie. Er zijn geen verdere acties benodigd voor deze kwetsbaarheid.\n\n```\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32185 | 5.50 | Voordoen als andere gebruiker       | \n| CVE-2026-33823 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41102 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nM365 Copilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42893 | 7.40 |                 | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35440 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40364 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40366 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40421 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40361 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40367 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42831 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40363 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40419 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40358 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35439 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40368 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-33110 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-33112 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40357 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40365 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40360 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40359 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42832 | 7.70 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40418 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35436 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40420 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144"}, {"timestamp": "2026-05-12T16:38:43Z", "date_only": false, "value": "2026-05-12T16:38:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review", "record": "CVE-2026-35440", "field": "creation_timestamp", "uuid": "8a2f72a2-f0a5-43a6-ae2d-a4c3d3d1bdf1", "url": "https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review"}, {"timestamp": "2026-05-12T16:58:36.387Z", "date_only": false, "value": "2026-05-12T16:58:36.387Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-35440", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-12T17:53:08.775Z", "date_only": false, "value": "2026-05-12T17:53:08.775Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-35440", "record": "MSRC_CVE-2026-35440", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-12T17:53:28.017Z", "date_only": false, "value": "2026-05-12T17:53:28.017576Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0144", "record": "NCSC-2026-0144", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-12T17:53:28.017Z", "date_only": false, "value": "2026-05-12T17:53:28.017576Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0144", "record": "NCSC-2026-0144", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-12T17:53:28.017Z", "date_only": false, "value": "2026-05-12T17:53:28.017576Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0144", "record": "NCSC-2026-0144", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-12T18:17:14Z", "date_only": false, "value": "2026-05-12T18:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M7Q8-MVMC-97P3", "record": "GHSA-M7Q8-MVMC-97P3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-12T18:17:14.287Z", "date_only": false, "value": "2026-05-12T18:17:14.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-35440", "record": "FKIE_CVE-2026-35440", "field": "published"}, {"timestamp": "2026-05-12T18:30:44Z", "date_only": false, "value": "2026-05-12T18:30:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M7Q8-MVMC-97P3", "record": "GHSA-M7Q8-MVMC-97P3", "field": "published"}, {"timestamp": "2026-05-12T18:30:44Z", "date_only": false, "value": "2026-05-12T18:30:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M7Q8-MVMC-97P3", "record": "GHSA-M7Q8-MVMC-97P3", "field": "modified"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1490", "record": "WID-SEC-W-2026-1490", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1490", "record": "WID-SEC-W-2026-1490", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1490", "record": "WID-SEC-W-2026-1490", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1490", "record": "WID-SEC-W-2026-1490", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0584", "record": "CERTFR-2026-AVI-0584", "field": "last_revision_date"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0584", "record": "CERTFR-2026-AVI-0584", "field": "initial_release_date"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0584", "record": "CERTFR-2026-AVI-0584", "field": "revisions.0.revision_date"}, {"timestamp": "2026-05-13T01:08:48Z", "date_only": false, "value": "2026-05-13T01:08:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20", "record": "CVE-2026-35440", "field": "creation_timestamp", "uuid": "3475d1c9-27c0-447f-b455-3c2913bf7513", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20"}, {"timestamp": "2026-05-13T08:41:45.401Z", "date_only": false, "value": "2026-05-13T08:41:45.401+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1490", "record": "WID-SEC-W-2026-1490", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-13T10:15:39.136Z", "date_only": false, "value": "2026-05-13T10:15:39.136494Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-35440", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-13T10:15:39.136Z", "date_only": false, "value": "2026-05-13T10:15:39.136494Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-35440", "record": "FKIE_CVE-2026-35440", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-13T10:27:41.539Z", "date_only": false, "value": "2026-05-13T10:27:41.539Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-35440", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": true, "value": "2026-05-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-22367", "record": "CNVD-2026-22367", "field": "submitTime"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": true, "value": "2026-05-29", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-22367", "record": "CNVD-2026-22367", "field": "openTime"}, {"timestamp": "2026-08-10T15:12:48.527Z", "date_only": false, "value": "2026-08-10T15:12:48.527Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-35440", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:12:48.527Z", "date_only": false, "value": "2026-08-10T15:12:48.527Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-35440", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T18:10:00.173Z", "date_only": false, "value": "2026-10-26T18:10:00.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-35440", "record": "FKIE_CVE-2026-35440", "field": "lastModified"}]}