M365 Change Tracker

← All changes · security · CVE-2026-66807

CVE-2026-66807CriticalMonitor

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 7.8)

Remote Code Execution · Critical · CVSS 7.8. Affects: Microsoft 365 Apps, Microsoft Office, Microsoft Office LTSC, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac.

CVSS 7.8EPSS 0.4%Security update published 2026-08-23Applies to Cloud + on-premisesNVD

Affected: Microsoft 365 Apps, Microsoft Office, Microsoft Office LTSC, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac

Related changes

View at Microsoft →