| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-21514 | Microsoft Word Security Feature Bypass Vulnerability | Microsoft 365, Microsoft Office | Important | 27-02-2026 |
Technical Information
An unauthorized attacker could bypass OLE mitigations by sending a user specially crafted malicious Microsoft Word file that leverages reliance on untrusted inputs in security decisions and to protect users from vulnerable COM/OLE controls.
Patch release date: Feb 10, 2026
Further information on this vulnerability is available at : CVE-2026-21514
Affected Software
Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC for Mac 2024