Microsoft Word Remote Code Execution Vulnerability
Impact
Microsoft Word has a vulnerability allowing an attacker to execute code locally by controlling file names or paths in Microsoft 365 Apps for Enterprise version 16.0.1 and Microsoft Office 365 for Mac. The attacker needs access to the system. The impact is code execution.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · microsoft
Microsoft 365 Apps for Enterprise
1 range
Microsoft · microsoft
Microsoft 365 Apps for Enterprise
Compare with this publisher’s ranges. This does not inspect your installation.
affected
16.0.1 → before https://aka.ms/OfficeSecurityReleases
custom versions
Other versions: unknown
Microsoft · microsoft
Microsoft Office 365 for Mac
1 range
Microsoft · microsoft
Microsoft Office 365 for Mac
Compare with this publisher’s ranges. This does not inspect your installation.
affected
-
Other versions: unknown
Original source description
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-62804View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Environment requirements
These conditions apply together as specified by the publisher. A matching product name alone does not establish exposure.
microsoft · platform conditions
Any condition may hold
Vulnerable product
cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*From (inclusive): 16.0.1
Before: https://aka.ms/OfficeSecurityReleases
Vulnerable product
cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*From (inclusive): -
Original applicability statements
[
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*",
"versionStartIncluding": "16.0.1",
"versionEndExcluding": "https://aka.ms/OfficeSecurityReleases"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*",
"versionStartIncluding": "-"
}
]
}
]
}
]Contributing organizations · 2
Assigning organization
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.