Vulnerabilities Resolved in Microsoft Office (NCSC Advisory 2026-0116) (advisories.ncsc.nl)

• 12 vulnerabilities fixed in Microsoft Office products
• CVSS scores range from 4.6 to 8.4
• Exploitation requires user interaction (open file or click link)
• Highest severity: CVE-2026-33114, CVE-2026-33115, CVE-2026-32190 (CVSS 8.4)

"Microsoft has fixed vulnerabilities in several Office products. Attackers could exploit these to bypass security measures, impersonate other users, escalate privileges, and access sensitive data. Successful exploitation requires the victim to open a malicious file or follow a link. The most severe vulnerability has a CVSS score of 8.4."