Microsoft labels CVE-2026-44824 as a Microsoft Office remote code execution vulnerability because the attacker can be remote, even though the vulnerable Office code is ultimately triggered on the victim’s local machine after a file or content path is opened, previewed, or otherwise processed...