CVE-2026-20952CWE-416

Microsoft Office Remote Code Execution Vulnerability

High · published January 13, 2026

CVSS v3.1
8.4
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

⚡ A subtle "use after free" vulnerability in Microsoft Office could let an unauthorized attacker execute code right on your machine! 🖥️ Think of it like a restaurant that keeps serving a dish after the chef has accidentally dropped it on the floor — a dangerous mistake that can lead to some very unwelcome surprises at the table! An attacker exploiting this vulnerability could run code locally, potentially leading to unauthorized access, data manipulation, or even complete control over the affected system. It’s a serious breach of trust and safety, putting your sensitive data at risk!

Put simply

Think of it like a restaurant that keeps serving a dish after the chef has accidentally dropped it on the floor — a dangerous mistake that can lead to some very unwelcome surprises at the table! This vulnerability arises when Microsoft Office fails to properly manage memory, allowing an attacker to execute arbitrary code in the context of the user running Office. It's a classic case of mishandled memory that can be exploited if left unchecked.

What to do

An attacker exploiting this vulnerability could run code locally, potentially leading to unauthorized access, data manipulation, or even complete control over the affected system. It’s a serious breach of trust and safety, putting your sensitive data at risk! To mitigate this risk, ensure you update Microsoft Office to the latest version as soon as possible. Regularly monitor for patches and consider implementing stricter user permissions to limit access. Don't wait; act fast! You've got this! By staying updated and vigilant, you’re one step closer to keeping your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00526 · 43.7th percentile
Weakness
CWE-416 · Use After Free
Published
2026-01-13T17:57Z
EPSS history
Timeline
  • 13 JAN 17:57Z
    Microsoft Office Remote Code Execution Vulnerability
    cvelistv5