Microsoft update

KB5002829

Security Update

View on Microsoft →

Fixed in

Microsoft Word 2016 (32-bit edition) 16.0.5535.1000
Microsoft Word 2016 (64-bit edition) 16.0.5535.1000

Fixes 1 record

TI-2026-16969 CVE-2026-20948 · GHSA-cwwv-g5cv-g7hc

Microsoft Word Remote Code Execution Vulnerability

LOW 37

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00597 Published 2026-01-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.105.26011018 +3 CWE-822