Security CISA KEV CVE-2026-21514 CVE-2026-21514 CISA KEV
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
Severity unknown CVSS unknown Check the vendor advisory for fixed versions
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.
Product Office
Added to KEV 10 Feb 2026
Federal remediation due 3 Mar 2026
Known ransomware use Not reported
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this version Field-level log (2)
Up to 100 recent field edits are shown; older edits may be outside retention.
23 Oct 2026 · 09:33:49 UTC
Source coverage: cisa-kev Incomplete → Current 23 Oct 2026 · 08:31:50 UTC
Source coverage: cisa-kev Current → Incomplete Explore global source statements, affected packages and advisory history for CVE-2026-21514 . The catalog has a separate collection scope from Microsoft release records.
More advisories, affected versions and source history
cve-program · CVE-2026-21514 Published Microsoft 365 Apps for Enterprise Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft 365 Apps for Enterprise",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Office LTSC 2021 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC 2021",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Office LTSC 2024 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC 2024",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.0",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Office LTSC for Mac 2021 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2021",
"versions": [
{
"version": "16.0.1",
"lessThan": "16.106.26020821",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Office LTSC for Mac 2024 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2024",
"versions": [
{
"version": "16.0.0",
"lessThan": "16.106.26020821",
"versionType": "custom",
"status": "affected"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON