<< Back
CVE Number Vulnerability Product Severity Date
CVE-2026-45474 Microsoft Office Remote Code Execution Vulnerability Microsoft Office, Microsoft 365 Apps Critical 01-07-2026

Technical Information

An unauthenticated attacker can exploit this Microsoft Office vulnerability by causing specially crafted local content or a malicious file to be processed, triggering a use-after-free condition that results in arbitrary code execution on the affected system.

Patch release date: Jun 09, 2026
Further information on this vulnerability is available at : CVE-2026-45474

Affected Software

Microsoft Office 365 for Mac,
Microsoft Office 2019 for 32-bit editions,
Microsoft Office 2019 for 64-bit editions,
Microsoft 365 Apps for Enterprise for 32-bit Systems,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office for Android,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC for Mac 2024,
Microsoft Office 2016 (32-bit edition),
Microsoft Office 2016 (64-bit edition)