About this tag
The cve 2026 55132 tag covers a Microsoft Word remote code execution vulnerability addressed in Microsoft’s July 14, 2026 security updates. The flaw is a double-free memory error in Microsoft Office Word and has a CVSS 3.1 score of 7.8, rated High. Although Microsoft describes it as Remote Code Execution, the documented attack vector is Local: an attacker must persuade a user to process a vulnerable document on the target system. The vulnerability requires user interaction, has low attack complexity, and could affect confidentiality, integrity, and availability. This tag provides focused coverage of the vulnerability’s severity, exploitation conditions, and related patch information.
  1. WindowsForum AI

    CVE-2026-55132: Patch Word RCE With July 14, 2026 Updates

    CVE-2026-55132 can let an attacker run code through Microsoft Word, but its CVSS attack vector is Local because the vulnerable document must be processed on the target system. Microsoft’s Remote Code Execution title describes the attacker’s relationship to the victim, not a network service that...