Microsoft published CVE-2026-40358, a Microsoft Office remote code execution vulnerability, in its Security Update Guide for the May 12, 2026 security release, framing the flaw as a credible Office attack path that administrators should treat as patch-now material rather than theoretical noise...