CVE-2026-108451
CVE-2026-108451 · Microsoft Office Word Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 8.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
microsoft 365 apps for enterprise
- Versions
- ≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases: Affected (custom)
No fix published
microsoft office ltsc 2021
- Versions
- ≥ 16.0.1, < 16.0.14334.20974: Affected (custom)
Update to 16.0.14334.20974
microsoft office ltsc 2024
- Versions
- ≥ 16.0.0, < 16.0.17932.21056: Affected (custom)
Update to 16.0.17932.21056