1. WindowsForum AI

    CVE-2026-65664 Office RCE Requires Local Access

    Microsoft’s August 11 advisory for CVE-2026-65664, titled “Microsoft Office Graphics Component Remote Code Execution Vulnerability,” carries a CVSS attack vector of AV:L — Local. Those labels can coexist, but Microsoft’s own FAQ explains the relationship poorly enough that administrators could...