CVE-2026-63518: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Other sources
Microsoft Office Word Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63518?
CVE-2026-63518 has a severity score of 7.8, categorized as high.
What kind of vulnerability is CVE-2026-63518?
CVE-2026-63518 is a remote code execution vulnerability caused by a heap-based buffer overflow in Microsoft Office Word.
How can CVE-2026-63518 be exploited?
An unauthorized attacker can exploit CVE-2026-63518 to execute arbitrary code locally on affected systems running Microsoft Office Word.
How do I fix CVE-2026-63518?
To fix CVE-2026-63518, users should apply the latest security updates from Microsoft for affected Microsoft Office products.
Which software is affected by CVE-2026-63518?
CVE-2026-63518 affects multiple Microsoft Office software products, including Microsoft Office Word, Outlook 2016, and Microsoft 365 Apps for Enterprise.