CVE-2026-44824ImportantRevised 19 Jun
Microsoft Office Remote Code Execution Vulnerability
Assessment
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- Severity
- Important
- CVSS base score
- 7.8CVSS:3.1/
AV:L/ AC:L/ PR:N/ UI:R/ S:U/ C:H/ I:H/ A:H/ E:U/ RL:O/ RC:C - Impact
- Remote Code Execution
- EPSS, next 30 days
- 0.6%Higher than 45.1% of scored CVEs · FIRST model run 29 Sep 2026 · about EPSS
- Public exploit code
- No Nuclei template lists it
- Exploitability
- Exploitation Less Likely
- Publicly disclosed
- No
- Customer action
- Required: apply the update
- Component
- Microsoft Office
- Weakness
- CWE-122: Heap-based Buffer Overflow
- Issued by
- Microsoft
- Published
- 9 Jun 2026 · June 2026
- Last revised
- 19 Jun 2026Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any actio…
Updates that fix it
6 KBs| KB | Type | Restart | Applies to | Other CVEs |
|---|---|---|---|---|
| KB5002873 | Security Update | — | Microsoft SharePoint Server Subscription Edition | All CVEs in KB5002873 |
| KB5002874 | Security Update | — | Microsoft SharePoint Server 2019 | All CVEs in KB5002874 |
| KB5002876 | Security Update | — | Microsoft SharePoint Server 2019 | All CVEs in KB5002876 |
| KB5002878 | Security Update | — | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | All CVEs in KB5002878 |
| KB5002880 | Security Update | — | Microsoft SharePoint Enterprise Server 2016 | All CVEs in KB5002880 |
| KB5002881 | Security Update | — | Microsoft SharePoint Enterprise Server 2016 | All CVEs in KB5002881 |
Affected products
Microsoft Office16 affected products
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office 365 for Mac
- Microsoft Office LTSC 2021 for 32-bit editions
- Microsoft Office LTSC 2021 for 64-bit editions
- Microsoft Office LTSC 2024 for 32-bit editions
- Microsoft Office LTSC 2024 for 64-bit editions
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC for Mac 2024
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition