Microsoft has listed CVE-2026-42831 as a Microsoft Office remote code execution vulnerability in the Security Update Guide, and the most important public signal on May 12, 2026, is not exploit drama but Microsoft’s confidence that the flaw exists and has enough technical shape to warrant action...