Description of the security update for Office 2016: July 14, 2026 (KB5002887)

🗓️ 14 Jul 2026 14:00:00Reported by MicrosoftType

mskb

mskb🔗 support.microsoft.com👁 18 Views

Security update released on 2026-07-14 by Microsoft.

Reporter	Title	Published	Views	Family All 224
ATTACKERKB	CVE-2026-56193	14 Jul 202617:05	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to disclose protected information.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.	16 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to data type mixing errors, allows attackers to execute arbitrary code.	16 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to integer overflow, allows attackers to disclose sensitive information.	16 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.	17 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.	17 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Office 365 applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.	20 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to the use of an uninitialized resource, allows a hacker to disclose protected information.	20 Jul 202600:00	–	bdu_fstec

14 Jul 2026 14:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.5 - 8.4

EPSS0.00546

SSVC

security update date 2026-07-14 Microsoft