Recorded 14 Oct 2026 at 11:22 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
The historical field “Public exploit code” recorded Nuclei detection-template membership. It did not establish exploit availability. The original recorded fields remain below.
The historical “Publicly disclosed: No” field could represent a missing MSRC assessment. It does not establish that the vulnerability was undisclosed. The original recorded fields remain below.
CVEMicrosoft Security Response Center
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Microsoft Office 365 for Mac, Microsoft Office for Android, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024
Updates that fix it
No KB listed
CISA KEV
Not listed in the collected catalog
EPSS
0.8%; scored 13 Oct 2026
Public exploit code
No Nuclei template listed
Published
8 Sep 2026 07:00 UTC
Last revised
17 Sep 2026 07:00 UTC
Revision note
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any actio…