M365 Change Tracker

← All changes · security · CVE-2026-55055

CVE-2026-55055ImportantMonitor

Microsoft Word Remote Code Execution Vulnerability

Severity Important  ·  Urgency Monitor

Why it matters: Important severity (CVSS 7.8)

Remote Code Execution · Important · CVSS 7.8. Affects: SharePoint Server, Microsoft Office, Microsoft 365 Apps, Microsoft Office LTSC for Mac, Microsoft Office LTSC, Microsoft Word.

CVSS 7.8EPSS 0.4%Security update published 2026-08-21Applies to Cloud + on-premisesKB5002891NVD

Affected: SharePoint Server, Microsoft Office, Microsoft 365 Apps, Microsoft Office LTSC for Mac, Microsoft Office LTSC, Microsoft Word

Related changes

View at Microsoft →