CVE-2026-56195 Details

A vulnerability allowing out-of-bounds read has been identified in Microsoft Office. This issue could enable an unauthorized attacker to locally disclose information by reading small portions of heap memory. The vulnerability affects multiple Office products and versions, including Microsoft Office LTSC 2021 (both 32-bit and 64-bit editions), Microsoft Office LTSC for Mac 2021, Microsoft 365 Apps for Enterprise (32-bit and 64-bit), Microsoft Office 365 for Mac, Microsoft Office 2016 (32-bit and 64-bit editions), Microsoft Office LTSC for Mac 2024 (both 32-bit and 64-bit editions), Microsoft Office LTSC 2024 (32-bit and 64-bit editions), and Microsoft Office 2019 (32-bit and 64-bit editions).

Users can download the security update for their specific Office version from the Microsoft Update Catalog or via the Click-to-Run service. For Office 2016, the security update is available through the Microsoft Update Catalog.