CVE-2026-77901 Microsoft CVE debrief

Who should care

Defenders responsible for Microsoft Office Word installations, particularly those in enterprise environments, should assess exposure and prioritize patching.

Why it matters

CVE-2026-77901 is a high-severity vulnerability in Microsoft Office Word that requires immediate attention from defenders. The vulnerability allows unauthorized attackers to execute code over a network, posing a significant risk to enterprise environments. Defenders should assess exposure, prioritize patching, and monitor for suspicious activity.

• Potential code execution over a network
• High severity vulnerability with CVSS score of 8.8
• Requires patching or compensating controls to prevent exploitation

Technical summary

CVE-2026-77901 is a null pointer dereference vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS score of 8.8 and is considered high severity. It requires immediate attention from defenders. The vulnerability's technical details include a null pointer dereference in Microsoft Office Word, which can be exploited by unauthorized attackers to execute code over a network. The technical summary is based on CVE Program and NVD records.

Defensive priority

High priority for Microsoft Office Word users

Recommended defensive actions

• Assess exposure of Microsoft Office Word installations
• Verify and apply patches from Microsoft
• Monitor for suspicious network activity
• Review and update incident response plans

Evidence notes

CVE Program and NVD records indicate a null pointer dereference in Microsoft Office Word, allowing unauthorized attackers to execute code over a network.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.