CVE-2026-50301 Details

A heap-based buffer overflow vulnerability has been identified in Microsoft Office. This vulnerability allows an unauthorized attacker to execute code locally. It affects multiple versions of Microsoft Office, including Microsoft 365 Apps for Enterprise, Office 2019, Office 2016, and various editions of Office LTSC. The vulnerability arises from a heap-based buffer overflow, which can be exploited by sending a malicious Office file to a user and convincing them to open it. Notably, the Preview Pane can also be used to trigger this vulnerability.

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, security updates are also available via Click-to-Run. Instructions for downloading the security update for Microsoft Office 2019, Office 2016, and various editions of Office LTSC can be found on the Microsoft Office Security Updates page.