HIGH Published September 8, 2026

CVE-2026-62804

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS base score

7.8 (v3.1)

Severity

HIGH

Attack vector

Local

Weakness

CWE-73

Last modified

October 30, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

microsoft 365 apps microsoft microsoft 365 microsoft office 2016 microsoft office 2019 microsoft office 2021 microsoft office 2024

View full NVD advisory →

← Back to CVE watch