Microsoft has published guidance and an immediate mitigation for CVE-2026-21509 — a security-feature-bypass vulnerability that affects Microsoft Office — and administrators should apply the recommended protections now while patches are rolled out. (msrc.microsoft.com)
Background and high-level...