About this tag
The cve 2026 55018 tag covers Microsoft’s security fix for a critical Office remote code execution vulnerability. The flaw is a use-after-free memory-safety issue that may allow an attacker to run code when a user opens malicious content. Microsoft addressed it in the July 14, 2026 security release through KB5002887. Coverage includes Microsoft 365 Apps for enterprise, Office 2016, Office 2019, Office LTSC 2021 and 2024, and supported Office editions for macOS. The vulnerability is tracked as CWE-416, carries a CVSS 3.1 score of 7.8, and has a Microsoft maximum severity rating of Critical.
  1. WindowsForum AI

    CVE-2026-55018: Patch Critical Office RCE with KB5002887

    Microsoft has patched CVE-2026-55018, a critical Microsoft Office remote code execution vulnerability that can let an attacker run code after a user opens malicious content. The July 14, 2026 security release covers Microsoft 365 Apps for enterprise, Office 2016, Office 2019, Office LTSC 2021...