CVE-2026-81952 – Microsoft Word Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious RTF file can turn a routine document open or preview into remote code execution.”
CVE-2026-81952 is a critical Microsoft Word remote code execution vulnerability caused by a heap-based buffer overflow. An unauthenticated attacker can craft a malicious RTF file that executes arbitrary code in the user’s context when the file is opened or rendered in the Preview Pane. The vulnerability requires no attacker privileges but does require user interaction.
Key Details
- Affected Product
- Microsoft 365 Apps
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.