M365 Change Tracker

← All changes · security · CVE-2026-108439

CVE-2026-108439CriticalMonitor

Microsoft Office Word Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 8.8)

Remote Code Execution · Critical · CVSS 8.8. Affects: Microsoft Office LTSC for Mac, Microsoft Office 365 for Mac, Microsoft Office LTSC, Microsoft 365 Apps.

CVSS 8.8EPSS 0.6%Security update published 2026-11-10Applies to Cloud + on-premisesNVD

Affected: Microsoft Office LTSC for Mac, Microsoft Office 365 for Mac, Microsoft Office LTSC, Microsoft 365 Apps

Related changes

Change history

2026-10-15 · First captured by tracker

View at Microsoft →