CVE-2026-20944

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*

History

16 Jan 2026, 16:15

Type Values Removed Values Added
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20944 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20944 - Vendor Advisory
First Time Microsoft 365 Apps
Microsoft
Microsoft office Long Term Servicing Channel
CPE cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*

13 Jan 2026, 18:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-13 18:16

Updated : 2026-01-16 16:15


NVD link : CVE-2026-20944

Mitre link : CVE-2026-20944

CVE.ORG link : CVE-2026-20944


JSON object : View

Products Affected

microsoft

  • office_long_term_servicing_channel
  • 365_apps
CWE
CWE-125

Out-of-bounds Read