{"id":"CVE-2026-63525","aliases":[],"cve":{"records":[{"id":"CVE-2026-63525","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-16T22:05:22.741Z","published":"2026-08-11T17:06:28.979Z","modified":"2026-10-30T17:22:16.454Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-10-30T17:22:16.454Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-08-12T13:42:11.045Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63525","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-197","description":"CWE-197: Numeric Truncation Error","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.0.5565.1000"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-08-12T03:59:43.306991Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Microsoft Office Word Remote Code Execution Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.","score":7.8,"severity":"high","published":"2026-08-11T17:06:28.979Z","modified":"2026-10-30T17:22:16.454Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Microsoft 365 Apps for Enterprise","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-63525"},{"vendor":"Microsoft","name":"Microsoft Office 2019","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-63525"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2021","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-63525"},{"vendor":"Microsoft","name":"Microsoft Office LTSC 2024","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-63525"},{"vendor":"Microsoft","name":"Microsoft Word 2016","platforms":["32-bit Systems","x64-based Systems"],"versions":[{"version":"16.0.1","status":"affected","lessThan":"16.0.5565.1000","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-63525"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63525"],"sources":[{"name":"CVE","id":"CVE-2026-63525","modified":"2026-10-30T17:22:16.454Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-63525"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7.8}],"sourceAffected":[],"observedAt":"2026-10-30T18:52:17.028Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T16:20:31.233Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T03:15:32.853Z","attemptedAt":"2026-10-29T03:15:32.853Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T03:15:33.745Z","attemptedAt":"2026-10-29T03:15:33.745Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T03:15:33.746Z","attemptedAt":"2026-10-29T03:15:33.746Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-29T03:15:33.762Z","attemptedAt":"2026-10-29T03:15:33.762Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-63525","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63525","modified":"2026-08-13T18:57:21.970","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T03:15:32.853Z"},{"source":"GitHub Advisory Database","id":"GHSA-p392-rqwr-573j","url":"https://github.com/advisories/GHSA-p392-rqwr-573j","modified":"2026-08-11T18:31:32Z","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T03:15:33.745Z"},{"source":"ENISA EUVD","id":"EUVD-2026-56691","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56691","modified":"Oct 28, 2026, 8:07:54 PM","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-10-29T03:15:33.746Z"},{"source":"FIRST EPSS","id":"CVE-2026-63525","url":"https://www.first.org/epss/","probability":0.00466,"percentile":0.40296,"date":"2026-10-28","checkedAt":"2026-10-29T03:15:33.762Z"}],"aiSummary":{"text":"A numeric truncation error in Microsoft Office Word may allow an attacker to execute code locally, affecting versions 16.0.1 of Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, and Microsoft Word 2016, as well as version 19.0.0 of Microsoft Office 2019 and version 16.0.0 of Microsoft Office LTSC 2024. The attacker needs local access. The impact is not fully stated.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:09:32.018Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-63525"}]}}