PT-2026-58570 · Microsoft · 365 Apps For Enterprise+10

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-55127

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-55127

Affected Products

365 Apps For Enterprise

Office 2019

Office 365 For Mac

Office Ltsc 2021

Office Ltsc 2024

Office Ltsc For Mac 2021

Office Ltsc For Mac 2024

Sharepoint Enterprise Server 2016

Sharepoint Server 2019

Sharepoint Server Subscription Edition

Word 2016

References · 2

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55127 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-55127 · Security Note