Microsoft update

KB5002866

Security Update

View on Microsoft →

Fixed in

Microsoft Office 2016 (32-bit edition) 16.0.5552.1000
Microsoft Office 2016 (64-bit edition) 16.0.5552.1000

Fixes 2 records

TI-2026-29138 CVE-2026-40363 · GHSA-wj5j-v4x9-fvq4

Microsoft Office Remote Code Execution Vulnerability

LOW 39

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00383 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-122

TI-2026-29133 CVE-2026-40358 · GHSA-4qm9-v478-vh8f

Microsoft Office Remote Code Execution Vulnerability

LOW 39

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00369 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +1 CWE-416