office patching

Microsoft’s March 10, 2026 security release patched a high‑impact vulnerability in Microsoft Excel tracked as CVE‑2026‑26108 — a heap‑based buffer‑overflow that can allow an attacker to execute code in the context of the current user when a crafted Excel file is opened. The patch is part of a...

Microsoft has published an advisory for CVE-2025-59240, an information-disclosure vulnerability in Microsoft Excel that can expose sensitive local data when a user interacts with a specially crafted workbook; Microsoft has issued a security update and describes the flaw as a local...

Microsoft has published updates to address CVE-2025-59222, a high‑severity use‑after‑free vulnerability in Microsoft Word that can lead to remote code execution when a user opens a crafted document, and Microsoft’s guidance is explicit: if multiple update packages apply to the software you run...

Microsoft has confirmed a serious remote code execution flaw in Microsoft Word, tracked as CVE-2025-59221, and issued patches across multiple Office product lines — with explicit vendor guidance that customers must install every update that applies to the specific Office/Word builds they run...

Microsoft’s advisory for CVE-2025-59243 names a memory-safety defect in Microsoft Excel that can lead to code execution when a specially crafted spreadsheet is opened, and organizations should treat the entry as a high-priority Office remediation event while applying layered mitigations and...

Microsoft’s Security Response Center has cataloged CVE-2025-53731 as a memory corruption vulnerability in Microsoft Office — a use-after-free bug that can allow an attacker to execute code locally on an affected system when a specially crafted Office file is processed. The advisory classifies...

In a move that will have a direct impact on businesses, educational institutions, and everyday Windows users alike, Microsoft has announced it will discontinue updates for Microsoft 365 apps installed via the Microsoft Store, pivoting exclusively to the Click-to-Run installation method in the...

Microsoft Office has recently been identified with a critical security vulnerability, designated as CVE-2025-49696. This flaw, stemming from an out-of-bounds read error, allows unauthorized attackers to execute arbitrary code on affected systems. Given the widespread use of Microsoft Office in...

As Microsoft approaches the official end-of-support phase for Windows 10, users, enterprises, and IT administrators are bracing for a wave of changes impacting how they work and secure their devices. Amid a flurry of announcements, policy updates, and user anxieties about shifting to Windows 11...