sharepoint updates

CVE-2026-55055 is a high-severity Microsoft Word code-execution vulnerability, but its CVSS attack vector is Local rather than Network. The apparent contradiction comes from two different uses of remote: Microsoft’s title describes the attacker’s position, while CVSS describes where the...

Microsoft patched CVE-2026-55028, an Important-rated Microsoft Office information-disclosure vulnerability, on July 14, 2026. The flaw can expose sensitive memory contents when an affected Office component performs an out-of-bounds read, but exploitation requires a user to interact with...