CVE-2026-23657

CVE-2026-23657 — Microsoft Word remote/local code execution via use-after-free . The vulnerability affects Microsoft Word (part of Microsoft 365 Apps / Office) and is caused by a use-after-free in Word processing code that can lead to arbitrary code execution when a malicious document is opened. ...

CVE-2026-23657 Microsoft Word Remote Code Execution Vulnerability

...