High MSRC-CVE-2026-42832 1 CVE

Microsoft Office Spoofing Vulnerability

Published May 12, 2026 · Updated May 12, 2026

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.

Security updates
16.0.19822.20190 — https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US
16.0.19822.20190 — https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US
16.109.26051019 — https://go.microsoft.com/fwlink/p/?linkid=831049

Vulnerabilities 1

High 7.7

CVE-2026-42832

Microsoft Office Spoofing Vulnerability

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

Microsoft Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC for Mac 2024 Microsoft Word for Android Android

May 12, 2026

Revision history

2026-05-12 #1
Information published.

References

CVE-2026-42832 Microsoft Office Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42832
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss