CVE-2026-26110: Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
Other sources
Microsoft Office Remote Code Execution Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26110?
CVE-2026-26110 has been classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-26110?
To fix CVE-2026-26110, apply the latest security update available for the affected Microsoft Office version.
What products are affected by CVE-2026-26110?
CVE-2026-26110 affects multiple versions of Microsoft Office, including Office 2016, Office 2019, Office LTSC 2021, and Office for Android.
What type of attack does CVE-2026-26110 enable?
CVE-2026-26110 enables an unauthorized attacker to execute arbitrary code on the user's machine through a type confusion vulnerability.
Is there a patch available for CVE-2026-26110?
Yes, Microsoft has released patches for CVE-2026-26110 that can be applied to the affected products.