PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-47290 Microsoft CVE debrief

CVE-2026-47290 is a high-severity vulnerability in Microsoft Office, allowing unauthorized attackers to execute code locally via a use-after-free exploit. The vulnerability has a CVSS score of 7.8 and is classified as HIGH. Microsoft Office 2016, 2019, 2021, and 2024 are affected, with various architectures and platforms impacted. The exploit requires user interaction, with CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Microsoft has provided a patch for this vulnerability, which is available through their update guide. Organizations should prioritize patching vulnerable systems to prevent local code execution.

Vendor
Microsoft
Product
Microsoft 365 Apps for Enterprise
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-14
Original CVE updated
2026-07-16
Advisory published
2026-07-14
Advisory updated
2026-07-16

Who should care

Organizations and individuals using Microsoft Office 2016, 2019, 2021, and 2024 should be aware of this vulnerability and take necessary precautions to mitigate the risk. Prioritization is recommended for patching vulnerable systems to prevent local code execution. Security teams should review compensating controls for exposed systems while remediation is scheduled and verified.

Technical summary

The vulnerability is caused by a use-after-free issue in Microsoft Office, which allows an attacker to execute code locally. The exploit requires user interaction, with CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Microsoft has provided a patch for this vulnerability, which is available through their update guide. The patch addresses the use-after-free issue, preventing attackers from executing code locally.

Defensive priority

High priority should be given to patching vulnerable systems, as this vulnerability allows for local code execution. Security teams should focus on applying the patch provided by Microsoft to vulnerable systems and monitoring systems for suspicious activity.

Recommended defensive actions

  • Apply the patch provided by Microsoft to vulnerable systems
  • Ensure all users have the latest updates installed
  • Monitor systems for suspicious activity
  • Implement compensating controls, such as restricting access to sensitive areas
  • Review relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record was published on 2026-07-14T18:17:17.760Z and was last modified on 2026-07-16T15:11:11.077Z. The NVD entry is currently Analyzed. The vulnerability affects Microsoft Office 2016, 2019, 2021, and 2024, with various architectures and platforms impacted. Evidence is limited to CVE and NVD details.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-14T18:17:17.760Z and has not been modified since then. The NVD entry is currently Analyzed.