| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability | Microsoft 365, Microsoft Office | Important | 29-01-2026 |
Technical Information
An unauthorized attacker can exploit a security feature bypass vulnerability by convincing a user to open a specially crafted Office document that abuses untrusted OLE input handling to bypass built-in OLE security mitigations.
Patch release date: Jan 26, 2026
Further information on this vulnerability is available at : CVE-2026-21509
Affected Software
Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,
Microsoft 365 Apps for Enterprise for 32-bit Systems,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC for Mac 2024,
Microsoft Office 2016 (32-bit edition),
Microsoft Office 2016 (64-bit edition)