Microsoft update

KB5002578

Security Update

View on Microsoft →

Fixed in

Microsoft Office 2016 (32-bit edition) 16.0.5556.1000
Microsoft Office 2016 (64-bit edition) 16.0.5556.1000

Fixes 1 record

TI-2026-17383 CVE-2026-21530 · GHSA-xp4f-mw6j-jxm8

Windows Rich Text Edit Elevation of Privilege Vulnerability

LOW 32

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00319 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1000 +14 CWE-415