High MSRC-CVE-2026-55130 1 CVE

Microsoft Word Remote Code Execution Vulnerability

Published Jul 14, 2026 · Updated Jul 14, 2026

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

Security updates
16.0.5561.1001 — https://support.microsoft.com/help/5002891
16.0.5561.1001 — https://support.microsoft.com/help/5002892
16.0.10417.20175 — https://support.microsoft.com/help/5002883
16.0.10417.20175 — https://support.microsoft.com/help/5002885
https — https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
16.0.19725.20434 — https://support.microsoft.com/help/5002882
16.0.5561.1000 — https://support.microsoft.com/help/5002890

Vulnerabilities 1

High 7.8

CVE-2026-55130

Microsoft Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024

Jul 14, 2026

Revision history

2026-07-14 #1
Information published.

References

CVE-2026-55130 Microsoft Word Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55130
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss