Read the docs
Microsoft update

KB5002859

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority LOW 38

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00328 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +1 CWE-416