cve 2026 63521

CVE-2026-63521 is a Microsoft Office Word information disclosure vulnerability addressed in Microsoft's August 11, 2026 Office security release. The fix is included in the patched Office build for Microsoft 365 Apps and other Office products. Administrators should ensure Word installations are updated to the corresponding patched build to mitigate the risk. Microsoft has published an advisory and lists the CVE under Word in its Office security-update release notes, though public technical details are limited. The focus is on applying the update as part of routine patch management for Office environments.