CVE-2026-105715
Microsoft · Published October 13, 2026
7.5
CVSS v3.1
HIGHPatch availableGet patch
Description
Microsoft Office Word Remote Code Execution Vulnerability. Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected Products
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC for Mac 2024
- Microsoft Office 365 for Mac
- Microsoft Office LTSC 2021 for 64-bit editions
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C