cve-2026-45458

CVE-2026-45458 is a remote code execution vulnerability affecting Microsoft Outlook and Word. Although the attacker can be remote, the exploit requires local processing of malicious content on the victim's machine, such as opening or previewing a crafted file. This distinction between remote attacker and local execution path is a common point of confusion in Office security advisories. Discussions on WindowsForum clarify that the vulnerability is triggered when local Office code handles weaponized content, making it critical for users to apply security updates and exercise caution with unexpected Office documents.