Microsoft Office Word Remote Code Execution Vulnerability

Summary

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Remediation

1. Inventory every Microsoft Microsoft 365 Apps for Enterprise deployment, including staging.
2. Upgrade Microsoft Microsoft 365 Apps for Enterprise to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108447