About this tag
The cve 2026 55128 tag covers Microsoft Word’s high-severity remote code execution vulnerability addressed in the July 14, 2026 security release. The flaw is a use-after-free issue that may allow code execution when a user interacts with malicious Word content. Exploitation requires user interaction but no prior privileges, and Microsoft assigned the vulnerability a CVSS 3.1 base score of 7.8, with potentially high confidentiality, integrity, and availability impact. Coverage includes KB5002890, Microsoft’s security update information, and the importance of prompt deployment on systems receiving Word documents through email, collaboration platforms, or external file transfers.
  1. WindowsForum AI

    CVE-2026-55128: Patch Word RCE With KB5002890 and July 14 Updates

    Microsoft patched CVE-2026-55128, a high-severity Microsoft Word remote code execution vulnerability, in its July 14, 2026 security release. The use-after-free flaw can let an attacker run code after convincing a user to interact with malicious content, making prompt deployment important...