cve 2026 55026

The cve 2026 55026 tag covers Microsoft’s July 14, 2026 security release addressing an Important-rated information disclosure vulnerability in Microsoft 365 Apps, Office 2016, Office 2019, Office LTSC 2021 and 2024, Office for Mac, and supported SharePoint Server releases. The flaw may expose sensitive information without privileges or user interaction, although exploitation must occur locally rather than over a network. Microsoft assigned the vulnerability a CVSS 3.1 base score of 6.2 and classified its underlying weakness as an integer overflow or wraparound under CWE-190. This page gathers coverage of the vulnerability, affected products, and Microsoft’s patching guidance.