CVE-2026-45643 Details

A vulnerability allowing untrusted pointer dereference has been identified in Microsoft Office Word. This issue enables an unauthorized attacker to execute code locally. The vulnerability is present in several versions of Microsoft Office, including Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise, both for Mac and Windows.

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC 2021 and 2024 for both 32-bit and 64-bit editions, the security update is available. Microsoft 365 Apps for Enterprise for 32-bit and 64-bit systems also have the security update available. However, the security update for Microsoft Office LTSC and Microsoft 365 for Mac is not yet available, but customers will be notified when it is.