M365 Change Tracker

← All changes · security · CVE-2026-45456

CVE-2026-45456CriticalMonitor

Microsoft Outlook and Word Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 8.4)

Remote Code Execution · Critical · CVSS 8.4. Affects: Microsoft Office 365 for Mac, SharePoint Server, Microsoft Office, Microsoft 365 Apps, Microsoft Office LTSC for Mac, Microsoft Office LTSC.

CVSS 8.4EPSS 0.4%Security update published 2026-09-02Applies to Cloud + on-premisesKB5002880NVD

Affected: Microsoft Office 365 for Mac, SharePoint Server, Microsoft Office, Microsoft 365 Apps, Microsoft Office LTSC for Mac, Microsoft Office LTSC

Related changes

Change history

2026-09-02 · First captured by tracker

View at Microsoft →