CVE-2026-69285 – Microsoft Office Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious Office file could turn one user action into remote code execution, putting sensitive business data and systems at risk.”
CVE-2026-69285 is a Critical remote code execution vulnerability in affected Microsoft Office products caused by a heap-based buffer overflow. An unauthorized attacker can exploit the vulnerability by convincing a user to open a specially crafted file. Successful exploitation could allow attacker-controlled code to execute, with high potential impact to confidentiality, integrity, and availability. The vulnerability is not publicly disclosed and is not known to be exploited.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.