CyberICT

CVE-2026-26113

Microsoft · Published March 10, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Microsoft Office Remote Code Execution Vulnerability. Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected Products

  • Microsoft SharePoint Enterprise Server 2016
  • Microsoft SharePoint Server Subscription Edition
  • Microsoft SharePoint Server 2019
  • Microsoft Office 2019 for 32-bit editions

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C