Microsoft update

KB5002766

Security Update

View on Microsoft →

Fixed in

Microsoft Office 2016 (32-bit edition) 16.0.5517.1000
Microsoft Office 2016 (64-bit edition) 16.0.5517.1000

Fixes 1 record

TI-2025-34640 CVE-2025-54906 · GHSA-5x6f-vhcg-x3vx

Microsoft Office Remote Code Execution Vulnerability

LOW 38

Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00835 Published 2025-09-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5517.1000 +2 CWE-416