Skip to content

CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability

HighCVSS 8.4 EPSS 0.39%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected products

ProductAffected versionsFixed in
Microsoft 365 Apps for Enterprise >= 16.0.1, < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases
Microsoft Office 2016 >= 16.0.0, < 16.0.5556.1005 16.0.5556.1005
Microsoft Office 2019 >= 19.0.0, < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases
Microsoft Office 365 for Mac >= 1.0.0, < 16.110.26061317 16.110.26061317
Microsoft Office for Android >= 16.0.1, < 16.0.20131.20024 16.0.20131.20024
Microsoft Office LTSC 2021 >= 16.0.1, < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2024 >= 16.0.0, < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC for Mac 2021 >= 16.0.1, < 16.110.26061317 16.110.26061317
Microsoft Office LTSC for Mac 2024 >= 16.0.0, < 16.110.26061317 16.110.26061317
Microsoft 365 apps All versions No fix listed
Microsoft 365 copilot All versions No fix listed
microsoft 365 All versions No fix listed
Microsoft office 2016 All versions No fix listed
Microsoft office 2019 All versions No fix listed
Microsoft office 2021 All versions No fix listed
Microsoft office 2024 All versions No fix listed
Microsoft office < 16.0.20131.20024 16.0.20131.20024
Microsoft office 365 < 16.110.26061317 16.110.26061317
Microsoft office macos 2021 < 16.110.26061317 16.110.26061317
Microsoft office macos 2024 < 16.110.26061317 16.110.26061317
Microsoft office 2016 < 16.0.5556.1005 16.0.5556.1005

References