CVE-2026-45457: Microsoft Word Remote Code Execution Vulnerability
Published Jun 9, 2026
·Updated
Microsoft Word Remote Code Execution Vulnerability
Other sources
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
— Microsoft
Affected Software
8 affected componentsFixes available
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Microsoft 365 Macos
Microsoft Office 2021 Macos
Microsoft Office 2024 Macos
Microsoft Office LTSC for Mac 2021<16.110.26061317
16.110.26061317
Microsoft Office LTSC for Mac 2024<16.110.26061317
16.110.26061317
Microsoft Office 365 for Mac<16.110.26061317
16.110.26061317
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.110.26061317
Event History
Jun 9, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
CVE Published
via MITRE·05:05 PM
Data Sourced
via MITRE·05:05 PM
DescriptionSeverity
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-45457?
CVE-2026-45457 has a high severity rating of 7.8.
2
What type of vulnerability is CVE-2026-45457?
CVE-2026-45457 is a remote code execution vulnerability in Microsoft Word.
3
How does CVE-2026-45457 affect users?
CVE-2026-45457 allows an unauthorized attacker to execute code locally on the affected system.
4
Which software versions are affected by CVE-2026-45457?
CVE-2026-45457 affects various versions of Microsoft 365 Apps and Microsoft Office for Mac.
5
How can I fix CVE-2026-45457?
To fix CVE-2026-45457, ensure that you update your affected Microsoft Office applications to the latest versions.