CVE-2026-45458 Details

A type confusion vulnerability has been identified in Microsoft Office, allowing an unauthorized attacker to execute code locally. This issue arises from the access of a resource using an incompatible type. The vulnerability is present in several Microsoft Office products, including Outlook and Word, and affects multiple versions.

Users can download the security update for Microsoft Word 2016 (32-bit and 64-bit editions) from the Microsoft Update Catalog. For Microsoft Office LTSC 2021 and 2024 (both 32-bit and 64-bit editions), the security update is also available through the Microsoft Update Catalog. Microsoft 365 Apps for Enterprise users can download the security update via the Microsoft Update mechanism. SharePoint Server users can find the security update on the Microsoft Update Catalog.