CVE-2026-70301 Microsoft CVE debrief

Who should care

Defenders responsible for Microsoft Office deployments should assess exposure and prioritize patching. This includes administrators of Microsoft 365 Apps for Enterprise, Office 365 for Mac, and Office LTSC versions. The vulnerability's high CVSS score of 8.8 indicates its potential impact.

Why it matters

CVE-2026-70301 is a high-severity vulnerability in Microsoft Office Word that allows remote code execution. Defenders should prioritize patching, especially for widely used Office versions. The vulnerability's impact could include unauthorized code execution over a network, emphasizing the need for swift remediation.

• Potential remote code execution over a network
• High CVSS score indicating significant risk
• Affected products include widely used Microsoft Office versions

Technical summary

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability affects multiple Microsoft Office products, including Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, and various Office LTSC versions.

Defensive priority

High

Recommended defensive actions

• Review and apply Microsoft's patch for CVE-2026-70301
• Inventory Microsoft Office installations for potential exposure
• Monitor for suspicious Word document openings

Evidence notes

The CVE record and source item provide details on a heap-based buffer overflow in Microsoft Office Word, allowing an unauthorized attacker to execute code over a network.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.