CVE-2026-45466 Details

A heap-based buffer overflow vulnerability has been identified in Microsoft Office Word. This vulnerability allows an unauthorized attacker to locally disclose information by exploiting the buffer overflow. The issue arises when Word processes a malicious file, potentially leading to the unauthorized reading of heap memory.

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC 2021, 2024, and Microsoft 365 for Mac, the security updates will be released as soon as possible, with customers being notified when they are available.