PT-2026-58527 · Microsoft · 365 Apps For Enterprise+7

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-55022

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2026-55022

Affected Products

365 Apps For Enterprise

Office 2016

Office 2019

Office 365 For Mac

Office Ltsc 2021

Office Ltsc 2024

Office Ltsc For Mac 2021

Office Ltsc For Mac 2024

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-55022 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55022 · Vendor Advisory