CVE-2026-20953

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-20953

CVE-2026-20953 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office that enables a local attacker to run arbitrary code. The CVE is associated with Office components and was coordinated in the January 2026 Patch Tuesday updates; Microsoft and third-par...