NCSC-2026-0144: Vulnerabilities Fixed in Microsoft Office (advisories.ncsc.nl)

• Multiple high-severity vulnerabilities in Microsoft Office products
• Impacts include remote code execution, privilege escalation, and data disclosure
• User interaction required; one CVE already fixed by Microsoft

"The Dutch NCSC has released an advisory detailing multiple vulnerabilities in Microsoft Office products. Several CVEs allow remote code execution, privilege escalation, or information disclosure. Users are advised to apply updates. One CVE (CVE-2026-33823) is already centrally fixed and listed for info only. Exploitation requires user interaction to open a malicious file or link."