| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-20944 | Microsoft Word Remote Code Execution Vulnerability | Microsoft 365, Microsoft Office | Critical | 29-01-2026 |
Technical Information
An unauthenticated attacker could achieve remote code execution by convincing a user to open a specially crafted malicious file, triggering an out-of-bounds read that allows arbitrary code execution locally on the victim system.
Patch release date: Jan 13, 2026
Further information on this vulnerability is available at : CVE-2026-20944
Affected Software
Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC for Mac 2024