Microsoft update

KB5002879

Security Update

View on Microsoft →

Fixed in

Microsoft Word 2016 (32-bit edition) 16.0.5556.1000
Microsoft Word 2016 (64-bit edition) 16.0.5556.1000

Fixes 3 records

TI-2026-33233 CVE-2026-45458 · GHSA-5632-qjr7-ch9q

Microsoft Outlook and Word Remote Code Execution Vulnerability

LOW 39

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00438 Published 2026-06-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.110.26061317 +4 CWE-416

TI-2026-33231 CVE-2026-45456 · GHSA-6gjp-59mg-98gh

Microsoft Outlook and Word Remote Code Execution Vulnerability

LOW 39

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00438 Published 2026-06-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.110.26061317 +4 CWE-843

TI-2026-33245 CVE-2026-45471 · GHSA-j65q-5x75-rjwv

Microsoft Word Remote Code Execution Vulnerability

LOW 36

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00455 Published 2026-06-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.110.26061317 +4 CWE-822