← Lark216 Home

Microsoft Update Intelligence

Administrator notices from Microsoft, summarised: what changed, and what you should do.

1Action Required 455Review Recommended
Microsoft Services 1
Product families
Microsoft 365
Clear
Advanced Filters
Review Recommended

CVE-2026-97745: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel allows remote code execution, which could be exploited over a network.

What you should do

Update Microsoft Office to the latest version. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97742: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97741: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97739: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel allows remote code execution. This affects users of Microsoft Office.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-97016: Microsoft Office Outlook Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Outlook could allow remote code execution; IT administrators must address this to prevent attacks.

What you should do

Apply the recommended update as soon as possible to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88207: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 7.5
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88185: Microsoft Office Word Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Word allows remote code execution via a heap-based buffer overflow.

What you should do

Apply the security update immediately to protect systems from remote code execution attacks. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.1
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Word, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88178: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update all affected Office installations to the latest patch as soon as possible to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88156: Microsoft Office Outlook Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Outlook could allow remote code execution if exploited.

What you should do

Update Microsoft Office Outlook to the latest version. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-88144: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update all affected Office installations to the latest patch as soon as possible to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70571: Microsoft Exchange Server Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Exchange Server allows remote code execution, which could be exploited by unauthorized attackers.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.1
Type
Security updates
Services
Exchange Online
Tags
Microsoft Exchange Server, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Exchange Online · verify against the original
Review Recommended

CVE-2026-70300: Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Office Word has a critical vulnerability that could allow remote code execution. This affects users of Microsoft Office.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Word, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70291: Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Office Outlook is vulnerable to a heap-based buffer overflow that could allow remote code execution by an unauthorized attacker.

What you should do

Apply the recommended update for Microsoft Office Outlook immediately to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70269: Microsoft Office Word Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Word allows remote code execution via a heap-based buffer overflow.

What you should do

Apply the latest Office update immediately to protect against the remote code execution vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.1
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Word, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70242: Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Office Outlook is vulnerable to a heap-based buffer overflow that could allow remote code execution by an unauthorized attacker.

What you should do

Apply the recommended update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 9.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Outlook, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-70215: Microsoft Office PowerPoint Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office PowerPoint allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update all affected Office installations to the latest patch immediately to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office PowerPoint, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-105718: Microsoft Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Excel allows remote code execution, which could be exploited by attackers over a network.

What you should do

Update Microsoft Excel to the latest version to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-102866: Microsoft Office SharePoint Elevation of Privilege Vulnerability

A vulnerability in Microsoft Office SharePoint allows unauthorized attackers to elevate privileges over a network due to improper cryptographic signature verification.

What you should do

Apply the security update as soon as possible to mitigate the vulnerability. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Severity
Critical · CVSS 8.1
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Elevation of Privilege, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects SharePoint · verify against the original
Review Recommended

CVE-2026-102857: Microsoft Office Visio Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Visio could allow remote code execution; IT administrators must address this issue.

What you should do

Apply the security update for Microsoft Office Visio as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Visio, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-102856: Microsoft Office Visio Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Visio could allow remote code execution. This affects users of Microsoft Office Visio.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Visio, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-102855: Microsoft Office Visio Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Visio could allow remote code execution. This affects users of Microsoft 365 / Office.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Visio, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-100211: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Update Office to the latest version to mitigate the risk. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-100210: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel could allow remote code execution if exploited.

What you should do

Apply the security update as soon as possible to mitigate the risk of remote code execution. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-100209: Microsoft Office Excel Remote Code Execution Vulnerability

A critical security vulnerability in Microsoft Office Excel allows remote code execution, which could be exploited over a network.

What you should do

Update all affected Office installations to the latest patch as soon as possible. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Services
Microsoft 365 Apps
Tags
Microsoft Office Excel, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Review Recommended

CVE-2026-85887: M365 Copilot Information Disclosure Vulnerability

A vulnerability in M365 Copilot allows authorized attackers to disclose information over a network due to incorrect permission assignment.

What you should do

Review and correct permission assignments for M365 Copilot resources. AI-suggested

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

Severity
Critical · CVSS 7.7
Type
Security updates
Tags
M365 Copilot, Information Disclosure, 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original