high7.8
CVE-2026-55132
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Impact
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Microsoft 365 | All versions |
| Microsoft | Office 2019 | All versions |
| Microsoft | Office 2021 | All versions |
| Microsoft | Office 2024 | All versions |
| Microsoft | Sharepoint Server | before 16.0.19725.20434 Versions 2016, 2019 |
| Microsoft | Word | Version 2016 |
| Microsoft | Microsoft 365 Apps For Enterprise | from 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| Microsoft | Microsoft Office 2019 | from 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| Microsoft | Microsoft Office 365 For Mac | from 1.0.0 before 16.111.26071215 |
| Microsoft | Microsoft Office LTSC 2021 | from 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| Microsoft | Microsoft Office LTSC 2024 | from 16.0.0 before https://aka.ms/OfficeSecurityReleases |
| Microsoft | Microsoft Office LTSC For Mac 2021 | from 16.0.1 before 16.111.26071215 |
| Microsoft | Microsoft Office LTSC For Mac 2024 | from 16.0.0 before 16.111.26071215 |
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | from 16.0.0 before 16.0.5561.1001 |
| Microsoft | Microsoft SharePoint Server 2019 | from 16.0.0 before 16.0.10417.20175 |
| Microsoft | Microsoft SharePoint Server Subscription Edition | from 16.0.0 before 16.0.19725.20434 |
| Microsoft | Microsoft Word 2016 | from 16.0.1 before 16.0.5561.1000 |