M365 Change Tracker

← All changes · security · CVE-2026-70300

CVE-2026-70300CriticalMonitor

Microsoft Office Word Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 9.8)

Remote Code Execution · Critical · CVSS 9.8. Affects: Microsoft 365 Apps, Microsoft Office LTSC.

CVSS 9.8EPSS 1.1%Security update published 2026-11-10Applies to Cloud + on-premisesNVD

Affected: Microsoft 365 Apps, Microsoft Office LTSC

Related changes

Change history

2026-10-16 · Status changed
Remote Code Execution · Important · CVSS 9.8. Remote Code Execution · Critical · CVSS 9.8. Affects: Microsoft 365 Apps, Microsoft Office LTSC.
2026-10-13 · First captured by tracker

View at Microsoft →