Microsoft update

KB5002852

Security Update

View on Microsoft →

Fixed in

Microsoft Office 2016 (32-bit edition) 16.0.5556.1001
Microsoft Office 2016 (64-bit edition) 16.0.5556.1001

Fixes 1 record

TI-2026-33389 CVE-2026-45645 · GHSA-wxr3-p34c-5p9q

Microsoft Office Remote Code Execution Vulnerability

LOW 36

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00372 Published 2026-06-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +1 CWE-822