CVE-2026-26113CriticalCVSS 8.4
Microsoft Office Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
🎯 Affected products14
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office LTSC 2021 for 64-bit editions
- Microsoft Office LTSC 2024 for 32-bit editions
- Microsoft Office LTSC 2024 for 64-bit editions
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC for Mac 2024
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
✅ Remediation
KB5002850 (Security Update) — fixed build 16.0.5543.1000 KB5002851 (Security Update) — fixed build 16.0.5543.1000 KB5002843 (Security Update) — fixed build 16.0.19725.20076 KB5002845 (Security Update) — fixed build 16.0.10417.20102 KB5002847 (Security Update) — fixed build 16.0.10417.20102 KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KBRelease Notes (Security Update) — fixed build 16.107.26030819 KB5002848 (Security Update) — fixed build 16.0.5543.1000
🔗 References (15)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26113
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108572
- referencehttps://support.microsoft.com/help/5002850
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108576
- referencehttps://support.microsoft.com/help/5002851
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108570
- referencehttps://support.microsoft.com/help/5002843
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108579
- referencehttps://support.microsoft.com/help/5002845
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108575
- referencehttps://support.microsoft.com/help/5002847
- referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- patchhttps://go.microsoft.com/fwlink/p/?linkid=831049
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=108574
- referencehttps://support.microsoft.com/help/5002848