cve-2026-69671

CVE-2026-69671 is a Microsoft Office Word remote code execution vulnerability covered on WindowsForum.com. According to the Microsoft Security Response Center advisory, the flaw is a heap-based buffer overflow in Word that can allow an unauthorized attacker to execute code over a network after persuading a user to open and interact with a specially crafted document. Microsoft rates it Important with a CVSS base score of 8.8 and classifies the underlying weakness as CWE-122. Affected products include current Microsoft 365 Apps for Enterprise, perpetual Office 2019 and Office LTSC releases, Office for Mac, and Microsoft Word 2016. Microsoft directs organizations to deploy the applicable Office update or fixed build.