Microsoft update

KB5002826

Security Update

View on Microsoft →

Fixed in

Microsoft Office 2016 (32-bit edition) 16.0.5535.1000
Microsoft Office 2016 (64-bit edition) 16.0.5535.1000

Fixes 3 records

TI-2026-16974 CVE-2026-20953 · GHSA-mwx8-frg3-85qq

Microsoft Office Remote Code Execution Vulnerability

LOW 39

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00574 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5535.1000 +1 CWE-416

TI-2026-16973 CVE-2026-20952 · GHSA-6pv3-4577-4j8m

Microsoft Office Remote Code Execution Vulnerability

LOW 39

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00526 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5535.1000 +1 CWE-416

TI-2026-16964 CVE-2026-20943 · GHSA-7mcc-vv62-fp9q

Microsoft Office Click-To-Run Remote Code Execution Vulnerability

LOW 34

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00646 Published 2026-01-13 Fixed in 16.0.5535.1000, 16.0.19426.20170 +3 CWE-426