{"id":"CVE-2026-62804","aliases":[],"cve":{"records":[{"id":"CVE-2026-62804","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-14T21:08:07.965Z","published":"2026-09-08T17:19:33.702Z","modified":"2026-10-30T21:57:48.608Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-10-30T21:57:48.608Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-08T18:21:43.751Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62804","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-73","description":"CWE-73: External Control of File Name or Path","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*","versionStartIncluding":"-"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-08T18:21:22.042136Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Microsoft Word Remote Code Execution Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.","score":7.8,"severity":"high","published":"2026-09-08T17:19:33.702Z","modified":"2026-10-30T21:57:48.608Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Microsoft 365 Apps for Enterprise","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-62804"},{"vendor":"Microsoft","name":"Microsoft Office 365 for Mac","platforms":[],"versions":[{"version":"-","status":"affected"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-62804"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62804"],"sources":[{"name":"CVE","id":"CVE-2026-62804","modified":"2026-10-30T21:57:48.608Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-62804"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7.8}],"sourceAffected":[],"observedAt":"2026-10-30T22:48:50.387Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:10:30.844Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T23:55:35.137Z","attemptedAt":"2026-10-30T23:55:35.137Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T23:55:35.777Z","attemptedAt":"2026-10-30T23:55:35.777Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T23:55:35.891Z","attemptedAt":"2026-10-30T23:55:35.891Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-30T23:55:35.136Z","attemptedAt":"2026-10-30T23:55:35.136Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-62804","url":"https://www.first.org/epss/","probability":0.00609,"percentile":0.49096,"date":"2026-10-30","checkedAt":"2026-10-30T23:55:35.136Z"},{"source":"NVD","id":"CVE-2026-62804","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62804","modified":"2026-10-30T22:16:57.303","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-30T23:55:35.137Z"},{"source":"GitHub Advisory Database","id":"GHSA-xc87-v37h-p529","url":"https://github.com/advisories/GHSA-xc87-v37h-p529","modified":"2026-09-08T18:32:14Z","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-30T23:55:35.777Z"},{"source":"ENISA EUVD","id":"EUVD-2026-73923","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-73923","modified":"Oct 30, 2026, 9:57:48 PM","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-10-30T23:55:35.891Z"}],"aiSummary":{"text":"Microsoft Word has a vulnerability allowing an attacker to execute code locally by controlling file names or paths in Microsoft 365 Apps for Enterprise version 16.0.1 and Microsoft Office 365 for Mac. The attacker needs access to the system. The impact is code execution.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T00:26:06.299Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-62804"}]}}