Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-80080
Scope
What the vendor says is affected
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC 2021 for 64-bit editions
- Microsoft Office LTSC 2021 for 32-bit editions
- Microsoft Office LTSC 2024 for 32-bit editions
- Microsoft Office LTSC 2024 for 64-bit editions
- Microsoft Office LTSC for Mac 2024
- Microsoft Word 2016 (32-bit edition)
- Microsoft Word 2016 (64-bit edition)
- Microsoft Office 365 for Mac
Versions the vendor lists as fixed
- https://aka.ms/OfficeSecurityReleases
- 16.112.26081010
- 16.0.5565.1000
Next step
What the vendor recommends
Click to Run Release Notes Install KB5002901.
Review the complete instructions on the vendor's siteUpdate history
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- The vendor changed its remediation guidance.
Timeline
When this advisory changed
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.
Vulnerabilities