Firetruck

CVE-2026-21514

KEV
Updated Aug 19, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft 365 Apps for EnterpriseMicrosoft / Microsoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office LTSC 2021Microsoft / Microsoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office LTSC 2024Microsoft / Microsoft Office LTSC 2024>= 16.0.0, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office LTSC for Mac 2021Microsoft / Microsoft Office LTSC for Mac 2021>= 16.0.1, < 16.106.26020821affected
Microsoft Office LTSC for Mac 2024Microsoft / Microsoft Office LTSC for Mac 2024>= 16.0.0, < 16.106.26020821affected