Vulnerabilities & Exploits
Tenable One telemetry shows nearly 14 million vulnerable assets across seven Tier‑1 countries; the count is a lower‑bound estimate.
1 source · Mar 17
Known exploited · CISA KEV
CVSS 7.8 HIGH: reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to… EPSS 2% (73rd percentile). Microsoft patch: Click to Run.
CISA federal remediation date Mar 3 · date passed
Tenable
CVE-2026-21514 FAQ: OLE bypass N-Day in Microsoft Word | Tenable®
The OLE bypass N-day vulnerability (CVE-2026-21514) in Microsoft Word exposes nearly 14 million assets.
originalPart of the PlainSec briefing for 2026-03-18
Every edition of this story: Microsoft Word OLE Bypass Exposes Nearly 14 Million Assets