Description of the security update for Word 2016: July 14, 2026 (KB5002890)

🗓️ 14 Jul 2026 14:00:00Reported by MicrosoftType

mskb

mskb🔗 support.microsoft.com👁 22 Views

Security update for Microsoft released on 2026-07-14.

Reporter	Title	Published	Views	Family All 125
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise software allows a perpetrator to disclose protected information.	17 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in Microsoft Word, the Microsoft SharePoint Server corporate application suite, Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise, as well as the Microsoft Office Server software suite and Microsoft 365 Apps for Enterprise, is related to a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.	20 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to integer overflow, allows an attacker to execute arbitrary code.	21 Jul 202600:00	–	bdu_fstec
BDU FSTEC	Уязвимость пакетов программ Microsoft Office, Word и 365 Apps for Enterprise, позволяющая нарушителю выполнить произвольный код	27 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise text editors arises from improper validation of certain input types, allowing attackers to disclose protected information.	30 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps for Enterprise, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.	30 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.	31 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise arises from the operation beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.	31 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, a component of the Microsoft Office 365 suite of programs, allows a perpetrator to execute arbitrary code.	3 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, the Microsoft Office 365 suite of programs, related to numerical truncation errors, allows a perpetrator to disclose protected information.	3 Aug 202600:00	–	bdu_fstec

14 Jul 2026 14:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.8

EPSS0.00578

SSVC

security update Microsoft date 2026-07-14