| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-20948 | Microsoft Word Remote Code Execution Vulnerability | Microsoft Office | Important | 06-02-2026 |
Technical Information
An unauthenticated attacker could achieve remote code execution by persuading a user to open a specially crafted file, triggering an untrusted pointer dereference that allows arbitrary code execution locally on the victim system.
Patch release date: Jan 13, 2026
Further information on this vulnerability is available at : CVE-2026-20948
Affected Software
Microsoft Office LTSC for Mac 2021,Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC for Mac 2024,
Microsoft Word 2016 (32-bit edition),
Microsoft Word 2016 (64-bit edition)